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INTRODUCTION 


Disclaimer 


SmartRG does not assume any liability arising out of the application or use of any products, or software described herein. 
Neither does it convey any license under its patent rights nor patent rights of others. SmartRG further reserves the right to 
make changes to any products described herein without notice. This publication is subject to change without notice. 


Any trademarks mentioned in this publication are used for identification purposes only and may be properties of their 
respective owners. 


Copyright and Trademarks 
Copyright © 2016 by SmartRG, Inc. 


The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in aretrieval system, 
translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chem- 
ical, photocopying, manual, or otherwise, without the prior written permission of SmartRG, Inc. 


Published by SmartRG, Inc. All rights reserved. 


Safety Warnings 
For your safety, be sure to read and follow all warning notices and instructions. 


e Toreduce the risk of fire, use only No. 26 AWG (American Wire Gauge) or larger telecommunication line cord. 


e Do NOT open the device or unit. Opening or removing covers can expose you to dangerous high voltage points or 
other risks. ONLY qualified service personnel can service the device. Contact your vendor for further information. 


e Use ONLY the dedicated power supply for your device. Connect the power cord or power adapter to the correct sup- 
ply voltage (110V AC in North America or 230V AC in Europe). 


e Do NOT use the device if the power supply is damaged as it might cause electrocution. 

e Ifthe power supply is damaged, remove it from the power outlet. 

e Do NOT attempt to repair the power supply. Contact your local vendor to order a new power supply. 
e Place connecting cables carefully so that no one will step on them or stumble over them. 


e Do NOT allow anything to rest on the power cord and do NOT locate the product where anyone can walk on the 
power cord. 

e If you wall mount your device, make sure that no electrical, gas, or water pipes will be damaged. 

e Do NOT install nor use your device during a thunderstorm. There may be a remote risk of electric shock from light- 
ning. 

e Do NOT expose your device to dampness, dust, or corrosive liquids. 
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e Do NOT use this product near water, for example, in a wet basement or near a swimming pool. 
e Make sure to connect the cables to the correct ports. 

e Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your device. 

e Do NOT store things on the device. 

e Connect ONLY suitable accessories to the device. 


FCC Information 


See Appendix C: FCC_Statements. 
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WELCOME! 


Thank you for purchasing this SmartRG product. 


SmartRG proudly brings you the best, most innovative broadband gateways available. SmartRG enables service providers to 
monitor, manage, and monetize the connected home through the design and production of reliable and highly inter- 
operable hardware and software solutions. 


As an early innovator in TR-069 remote management technology, SmartRG offers the finest in managed broadband and home 
networking solutions. Our products leverage various broadband access technologies and are outfitted with highly cus- 
tomizable software, meeting diverse service provider requirements. Based in the USA, SmartRG provides local, proactive 
software development and customer support. In the rapidly evolving broadband market, SmartRG helps service providers 
keep their businesses on the cutting edge through its laser-focused product line, leveraging the very latest in broadband 
access and home networking technologies. SmartRG solutions enable service providers to improve their bottom line by redu- 
cing service costs and increasing customer satisfaction. 


Learn more at www.SmartRG.com. 


Purpose & Scope 


The purpose and scope of this document is to provide SmartRG customers with installation, configuration and monitoring 
information for the SR506n CPE. 


Intended Audience 


This document is intended for Network Architects, NOC Administrators, Field Service Technicians, and other networking pro- 
fessionals responsible for deploying and managing broadband access networks. Readers of this manual are assumed to have 
a basic understanding of desktop computer operating systems, networking concepts and telecommunications. 


Getting Assistance 


Subscribers: If you require help with this product, please contact your service provider. 


Service providers: If you require help with this product, please open a support request. 
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GETTING FAMILIAR WITH YOUR GATEWAY 


This section contains descriptions of the SR506n gateway's lights, ports, and buttons. 


LED Status Indicators 


Your SmartRG gateway has several indicator lights (LEDs) on its exterior. The LED indicators are described below (from left 
to right). 


INDICATOR ACTION DESCRIPTION 


Device is powered on and operating normally. 


SS SS LL eee ete he ee ee hs FEEL ET TE IE EE EE Sse See OTTO AE EI Ses 


| Software is syncing. 


(6) 


‘The device is powered off. 


RE TE KI EE AE DE OE LT EIE DERE EE EDE OR EE EE EER 


l DSL link is established. 


ELERE EET aps Shears sea EAN EEE II EE EL E OER IE ELE EE OR IN EL OE EE EET 


The DSL line is training. 


(0) 


‘The device is powered off. 


EA EA RE EO See EA TE OE LE EE Se IE EE AE eee Se 


l Internet link is established. 


NR LE EE EE OO TE DEAR EE EE EE ET a EE 


‘ Data is being transmitted. 


‘Ethernet interface is connected. 


EI AD PL AE EDE EE EE EA TE ARE ME EL TE PEER OE EA ere. 


‘Data is being transmitted. 


(6) 


‘Ethernet interface is disconnected. 


l The connection of 3G or USB flash disk has established. 
: '!! TW: Bug RB-2380 open on this LED's function. Check for resolution before publishing. 


! No signal is detected. 
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Connections 


Below is an illustration of the connectors located on the back of the SR506n gateway. 


Power On/Off 


The buttons and ports located on the gateway are described below. 


Feature Description 


‘The Reset button is a small hole in the gateway's enclosure with the actual button mounted behind the sur- 
‘face. This style of push-button prevents the gateway from being inadvertently reset during handling. Reset 

: must be actuated with a paper clip or similar implement. 

‘The Reset button is located on the left side of the unit. Press the button for at least 1 second and release. The 
i factory default settings are restored. 
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Buttons 


On/Off Button 


The On/Off button is located on the back of the gateway and turns the gateway on and off. 


Reset Button 


The Reset button is a small hole in the gateway's enclosure with the actual button mounted behind the surface. This style 
of push-button prevents the gateway from being inadvertently reset during handling. Reset must be actuated with a paper 
clip or similar implement. 


The Reset button is located on the backleft side of the unit. 


This pin-hole sized reset button has three functions. The duration for which the button is held dictates which function is 
carried out. 


Hold Duration Effect 
Less than 6 Performs a modem reset that is equivalent to the Reboot function in the gateway software. 


20 or more seconde Changes the POWER LED to red and the gateway enters CFE mode which is a state associated with per- 
‘ forming firmware updates via Internet browser. 


WPS Button 


The WPS button is located on the top of the unit. It triggers WPS (Wi-Fi Protected Setup™) mode. WPS is a standard means 
for creating a secure connection between your gateway and various wireless client devices. It is designed to simplify the 
pairing process between devices. 


If you have client devices that support WPS, use this button to automatically configure wireless security for your network. 
For specific instructions, refer to the Quick Start Guide included with your gateway. Also see the Wireless section of this 
manual. 


WiFi Button 


The WiFi button is located on the top of the unit and toggles the WiFi radio on and off. 


To activate the WiFi radio, press and hold the WiFi button for 3-5 seconds and then release. Repeat this step to deactivate 
the WiFi radio. 
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INSTALLING YOUR SR506N GATEWAY 


1. Plug the power adapter into the wall outlet and then connect the other end to the Power port of the gateway. 
2. Connect the LAN port of the gateway to the network card of the PC using an Ethernet cable. 
3. Turn on the unit by pressing the On/Off button on the side of the gateway. 


Note: If you use 3G WAN service, connect the 3G USB data card toa USB port of the gateway. If you use the Ethernet uplink, 
connect to the WAN interface using an Ethernet cable. You cannot use the xDSL uplink, 3G WAN service, and Ethernet 
uplink all at the same time. 


Your gateway is now automatically being set up to connect to the Internet. This process may take a few minutes to com- 
plete before you can begin using your Internet applications (browser, email, etc.). 


If you are unable to connect to the Internet, confirm that all cable connections are in place and the router’s power is 
turned on. 
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LOGGING IN TO YOUR GATEWAY'S UI 


To manually configure the SmartRG SR555acSR655ac gateway, access the gateway's embedded UI. 


1. Open a Web browser on your computer. 


2. Enter http://192.168.1.1 (the default IP address of the DSL gateway) in the address bar. The login page appears 
where you can access the gateway's GUI or view the system log. For more information about configuring system logs, 
see the System Log topic in this User Manual. 


eoe ` Network Status 
é CA 19216811 


SMART/RG' 


forward thinking 


Authentication Required á 


The server http //192.168.1. 1-80 requires à username and 
password. The server says: Broadband Router. 


User Name admin 
Password [sees j 


Cancel 


Log Ia 


Setup will be 


~- Establishing WAN Ethernet connection - Please confirm your gateway is connected to 
the Internet -- 


3. Click the Manage gateway (advanced) link at the top right of the page. 


4. Enter the admin user name and password. The default admin username/password are admin/admin. The default 
username/password of the common user are user/user. It is recommended that you change these default values 
after logging in to the DSL gateway for the first time. 


5. Click OK. The gateway interface appears, showing the Device Info summary page. 
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DEVICE INFO 


In this section, you can view information about your gateway's setup, status or nature of its connection with the provider 
and with LAN devices. You cannot interact with or change the settings in this section. 


Summary 


When you log into the gateway interface, the Device Info summary page appears. This page displays details about the hard- 
ware and software associated with your gateway. In addition, the current status of the WAN connection (if present) is 


shown. 
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forward thinking 


2.6.1.2016:10:13:13:37:22 
Alpvi042j1.d26k1 


7.14.131.1608.cpe4. 16L05.0-kdb 


00:23:6a:d8:9d:86 
9000001 


WAN 


On this page, you can view information about the connection between your ISP and your gateway. The WAN interface can be 
DSL or Ethernet and supports a number of Layer 2 and above configuration options (explained later in this document). 
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In the left navigation bar, click Device Info > WAN. The following page appears. 


pret |pepee 0.0 1|PPPeE | Disabled | Disabled | Désatied | Disabted | Disabled | Disabled |Enatied Enatied | Consectes ERB. ee oe rig) 10,101.2.16| daat) 


The fields on this page are explained in the following table. 


Field Name Description 


Interface The connection interface (Layer 2 interface) through which the gateway handles the traffic. 


jee Bee AT eee es SES eS PRESSE EE HE TUE we Sea AR AE EE Siete ET 


The service description such ipoe. 0 0 1, showing the type of WAN and its ID. 


ee Saree See RENE DE EE DE pe esto ieee EI SIE DEEG EE OD ADEL OE DS ed EIEN DS DE DEEG EE 


‘The service type. Options are PPPoE, IPoE, and Bridge. 


ET RE EO EER OE EE E N ER eee EE EE T 


l The VLAN ID. Options are Disabled or 0-4094. 


EPE E PAEA O I EE EE DEER EED LE RE EDE EDE T EE AE 


‘The state of IPv6. Options are Enabled and Disabled. 


‘The state of NAT. Options are Enabled and Disabled. 


EDE EI ER AT OUE OE EI RR EE TT ols exe are OE OE EE DOP 


‘The state of the Firewall. Options are Enabled and Disabled. 


is 


: The status of the WAN connection. Options are Disconnected, Unconfigured, Connecting, and 
: Connected. 


IPv4 Address : The obtained IPv4 address. 


EE EE EA TE AE RE AA EE OE A E eet ese et see Sees see eae A 


IPv6 Address ' The obtained IPv6 address. 
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Statistics 


In this section, you can view network interface information for LAN, WAN Service, xTM and xDSL. All data is updated in 15- 
minute intervals. 


LAN 


On this page, you can view the received and transmitted bytes, packets, errors and drops for each LAN interface configured 
on your gateway. Data is provided for the total bytes, packets, errors and drops as well as bytes and packets for multicast 
transmissions, and packets for unicast and broadcast transmission. All local LAN Ethernet ports, Ethernet WAN ports and 
w10 (Wireless Interface) are included. 


In the left navigation bar, click Device Info > Statistics. The Statistics - LAN page appears where you can view detailed 
information about the status of your LAN. 


To reset the counters, click Reset Statistics near the bottom of the page. 


SMART/RG' SR506n 


forward thinking 


The fields on this page are explained in the following table. 


Field Name Description 


: Available LAN interfaces. The only avalable option is LAN 1.Options are LAN1 - LAN4, WAN (if con- 


Interface : figured on your device), Wireless, and 2.4 Ghz and 5 Ghz. 


: Number of dropped packets. 
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WAN Service 


On this page, you can view the received and transmitted bytes, packets, errors and drops for each WAN interface for your 
SmartRG Gateway. Data is provided for the total bytes, packets, errors and drops as well as bytes and packets for multicast 
transmissions, and packets for unicast and broadcast transmission. All WAN interfaces configured for your gateway are 
included. 


In the left navigation bar, click Device Info > Statistics > WAN Service. The Statistics - WAN page appears where you can 
view detailed information about the status of your WAN. 


To reset the counters, click Reset Statistics near the bottom of the page. 


SMART/RG' SR506n 


forward thinking 


The fields on this page are explained in the following table. 


Field Name Description 


Interface ‘ Available WAN interfaces. Options are: atm, ptm, and eth. 


‘Number of dropped packets. 


On this page, you can view the ATM/PTM statistics for your gateway. All WAN interfaces configured for your SmartRG gate- 
way are included. 


In the left navigation bar, click Device Info > Statistics > xTM. The Interface Statistics page appears. 


To reset these counters, click Reset near the bottom of the page. 
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forward thinking 


Interface Statistics 


In Cell Errors ‘Total quantity of received cell errors. 
xDSL 
On this page, you can view the DSL statistics for your gateway. All xDSL (VDSL or ADSL) interfaces configured for your 


SmartRG gateway are included. The terms and their explanations are derived from the relevant ITU-T standards and ref- 
erenced accordingly. 
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1. In the left navigation bar, click Device Info > Statistics > xDSL. The Statistics - xDSL page appears. 


SMART/RG' 


forward thinking 


2. Torun an xDSL Bit Error Rate (BER) test which determines the quality of the xDSL connection: 
a. Scroll to the bottom of the page and click xDSL BER Test. The ADSL BER Test dialog box appears. 
b. In the Tested Time field, select the duration in seconds and click Start. Options range from 1 second to 360 


seconds. The default is 20 seconds. 
The test transfers idle cells containing a known pattern and compares the received data with this known 
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pattern. Comparison errors are tabulated and displayed in the dialog box. 


@ Mozilla Firefox 


192.168.1.1/admin/derstop.tst 
ADSL BER Test - Result 


The ADSL BER test completed successfully. 


3. Toreset the counters, click Reset Statistics at the bottom of the page. 
The fields on this page are explained in the following table. 


Field Name Description 
‘xDSL mode that the modem has trained under, such as ADSL2+, G.DMT, etc. 


‘ The signal-to-noise ration margin (SNRM) is the maximum increase (in dB) of the received 
‘noise power, such that the modem can still meet all of the target BERs over all the frame 
: bearers. [2] 


‘ The signal attenuation is defined as the difference in dB between the power received at the 
‘near-end and that transmitted from the far-end. [2] 


Attainable Rate ‘ The typically obtainable sync rate, i.e., the attainable net data rate that the receive PMS-TC 
(Kbps) ‘and PMD functions are designed to support under the following conditions: 


e Single frame bearer and single latency operation 


e Signal-to-Noise Ratio Margin (SNRM) to be equal or above the SNR Target Margin 
BER not to exceed the highest BER configured for one (or more) latency paths 
Latency not to exceed the highest latency configured for one (or more) latency paths 


Accounting for all coding gains available (e.g., trellis coding, RS FEC) with latency 
bound 
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Field Name Description 


e Accounting for the loop characteristics at the instant of measurement [2] 


: The current net data rate of the xDSL link. Net data rate is defined as the sum of all frame 
‘ bearer data rates over all latency paths. [2] 


B (# of bytes in Mux : The nominal number of bytes from frame bearer #n per Mux Data Frame at Reference Point A 
Data Frame) ‘in the current latency path. 


M (# of Mux Data ' 
Frames in FEC Data : 


T (Mux Data Frames : The ratio of the number of Mux Data Frames to the number of sync bytes in the current 
over sync bytes) : latency path. 


R (# of check bytes :The number of Reed Solomon redundancy bytes per codeword in the current latency path. 
in FEC Data Frame) : This is also the number of redundancy bytes per FEC Data Frame in the current latency path. 


S (ratio of FEC over : 
PMD Data Frame 


L (# of bits in PMD 
Data Frame) 


| (interleaver block : 
size in bytes) 


‘The PMS-TC delay in milliseconds of the current latency path (or the lowest latency path 
‘when running dual-latency paths). 


‘ The number of Reed-Solomon-based Forward Error Correction (FEC) codewords trans- 
‘mitted/received. 


RS Correctable ‘ The number of Reed-Solomon-based FEC codewords received with errors that have been cor- 
Errors ‘rected. 


‘ The number of Reed-Solomon-based FEC codewords received with errors that were not cor- 
‘rectable. 


RS Codewords : (Visible only for gateways connected via DSL) Total number of Reed-Solomon Codewords 
Received ‘received. 


RS Codewords Cor- : (Visible only for gateways connected via DSL) Total number of Reed-Solomon Codewords cor- 
rected ‘rected. 
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Field Name Description 


RS Codewords : (Visible only for gateways connected via DSL) Total number of Reed-Solomon Codewords 
Uncorrected ‘Uncorrected 


HEC Errors ‘A count of ATM HEC errors detected. As per ITU-T G.992.1 and G.992.3, a1-byte HEC is gen- 
‘erated for each ATM cell header. Error detection is implemented as defined in ITU-T 1.4321 
‘with the exception that any HEC error shall be considered as a multiple bit error, and there- 
: fore, HEC Error Correction is not performed. [1],[2] 


OCD Errors ‘ Total number of Out-of-Cell Delineation errors. ATM Cell delineation is the process which 
: allows identification of the cell boundaries. The HEC field is used to achieve cell delineation. 
: [4] An OCD Error is counted when the cell delineation process transitions from the SYNC state 
: to the HUNT state. [2] 


LCD Errors ‘Total number of Loss of Cell Delineation errors. An LCD Error is counted when at least one 
‘OCD error is present in each of four consecutive overhead channel periods and SEF (Severely 
: Errored Frame) defect is present. [2] 


‘ Total number of Errored Seconds. This parameter is a count of 1-second intervals with one or 
‘more CRC-8 anomalies. [4] 


Total SES ‘ Total number of Severely Errored Seconds. An SES is declared if, during a 1-second interval, 
‘there are 18 or more CRC-8 anomalies in one or more of the received bearer channels, or one 
‘or more LOS (Loss of Signal) defects, or one or more SEF (Severely Errored Frame) defects, or 
: one or more LPR (Loss of Power) defects. [4] 


Total UAS ‘ Total number of Unavailable Seconds. This parameter is a count of 1-second intervals for 
‘which the xDSL line is unavailable. The xDSL line becomes unavailable at the onset of 10 con- 
: tiguous SESs. These 10 SES’s shall be included in the unavailable time. Once unavailable, the 
: XDSL line becomes available at the onset of 10 contiguous seconds with no SESs. These 10 
‘ seconds with no SES’s shall be excluded from unavailable time. [4] 


References 

[1] ITU-T Recommendation G.992.1 (1999), Asymmetric digital subscriber line (ADSL) transceivers. 

[2] ITU-T Recommendation G.992.3 (2005), Asymmetric digital subscriber line transceivers 2 (ADSL2). 

[3] ITU-T Recommendation G.997.1 (2006), Physical layer management for digital subscriber line (DSL) transceivers. 


[4] ITU-T Recommendation |.432.1 (1999), B-ISDN user-network interface - Physical layer specification: General char- 
acteristics. 


Route 


On this page, you can view the LAN and WAN route table information configured in your SmartRG Gateway for both IPv4 and 
IPv6 implementation. 


In the left navigation bar, click Device Info > Route. The following page appears. 
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Device Info -- Route 


Summary 


Flags: U - up, ! - reject, G - gateway, H - host, R - reinstate 
D - dynamic (redirect), M - modified (redirect). 


Destination | Gateway | Subnet Mask | Flag | Metric| Service| Interface 
192.168.5.0 |0.0.0.0 |255.255.255.0]u Jo | (bo | 
IPvé Route 


Flags: U - up, ! - reject, G - gateway, H - host, R - reinstate 
D - dynamic (redirect), M - modified (redirect). 


The fields on this page are explained in the following table. 


Field Name Description 
IPv4 & IPv6 route fields 


Destination (Including IPv6 : Destination IP addresses. 


Flag (Including IPv6 Route) , Status of the flags. See detailed descriptions above the tables. 


EE EE BEE EL EE EE RE EER EE ED OE EL TOL IT AR OE TEE IE DI EER ET DRE 


Metric (Including IPvé Route) l Number of hops required to reach the default gateway. 


TT ET EE ER TEL areca a! EE ET DI EE TE Spare EE IT RO IE EI oye ere TEE EE 


Service (Including IPv6 Route) Service type. 


Bees dk EE ee See ERELL ESE ER EE REDE DODE VEE SSA SS END IG RE EE DEE N EENDE EE EE ED 


Interface (Including IPvé Route) : WAN/LAN interface. 


IPv6 Route only fields 
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Field Name Description 


Destination ‘ Destination IP addresses. 


Next Hop : Next hop IP address. 


ARP 


On this page, you can view the host IP addresses and their hardware (MAC) addresses for each LAN Client connected to the 
gateway via a LAN Ethernet port or wireless LAN. 


In the left navigation bar, click Device Info > ARP. The following page appears. 
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The fields on this page are explained in the following table. 


Field Description 
Name 


IP address “The IP address of the host. 


Each entry in the ARP cache is marked with one of these flags. Options are: Complete, Permanent, and 
' Published. 


“The system level interface by which the host is connected. Options are: br(n), atm(n), and ptm(n). 
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DHCP 


The DHCP page displays a list of locally connected LAN hosts and their DHCP lease status, which are directly connected to 
the SmartRG Gateway via a LAN Ethernet port or Wireless LAN. 


In the left navigation bar, select Device Info > DHCP. The following page appears. 
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Device Info -- DHCP Leases 


Expires In 


Hostname MAC Address P Address 
dadamo- Ra ES 22 hours, 14 


The fields on this page are explained in the following table. 


Field Name Description 


Hostname ‘The host name of each connected LAN device. 


Expires In ‘The time until the DHCP lease expires for each LAN device. 
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ADVANCED SETUP 


In this section, you can configure network interfaces, security, quality of service settings, and many other settings for your 
gateway and network. 


Layer2 Interface 


In this section, you can configure interfaces for ATM and PTM interfaces. Generally you can accept the settings configured 
by default. If your network is highly customized, you may need to modify some of the settings, such as Username and Pass- 
word. 


ATM Interface 


On this page, you can configure Asynchronous Transfer Mode / Permanent Virtual Conduit (ATM/PVC) settings for your gate- 
way. You can customize latency options, link type, encapsulation mode, and more. 


Note: Devices (routers) on both ends of the connection must support ATM / PVC. 


1. In the left navigation bar, click Advanced Setup > Layer2 Interface > ATM Interface and then click Add. The fol- 
lowing page appears. 
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Gewtice Info ATM PWC Configuration 


Anord Sap f k : 
Layer? interface Thi gereen allows you fo configure a ATM FC, 


Eer wei: a 285) 
dIE N 52-455 
Ethemet Config wort JH 35) 
Select DU Latency 
gt Pathe) (Fass) 

a Pach Clrbereaved) 


Security 

Parental Control 
Quality of Service: 
Routing 


Sebect DSL Lind Type (Eos Is for PPPOE, IPOE, and Bridge.) 


interface Grouping - 
ahis ; + [eelisis] (et iadicates no shaping) 
(Pase 
Certificate Select Scheduter for Queues of Equal Precedence as the Default Queue 
bias att w Weighted Row Robin 
Wiebe 
Diagrestics 2 GER 
Marge rent : [1-5] (lower value, higher priority] 
Logai 
LER 
[t-8} [lower value, higher priority) 
bu RENE Ml We de ad Wiig are oond gerwcechenine VO 
default queue pretedience and weighs will be ubed for arbleratken. 
, Ta VE precedence ard weight wil be wed for arbltretion. 


[ia || Aa | 


2. Modify the settings as desired, using the information provided in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


; Enter a Virtual Path Identifier. A VPI is an 8-bit identifier that uniquely identifies a network path 
: for ATM cell packets to reach its destination. A unique VPI number is required for each ATM 
: path. This setting works with the VCI. Each individual DSL circuit must have a unique VPI/VCI 


‘ combination. String limits are: 0-255. 


, Enter a Virtual Channel Identifier. A VCI is a 16-bit identifier that has a unique channel. Options 
: are: 32-65535. 
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Field Name Description 


Select DSL : Select the level of DSL latency. Options are: 


Latency e Path0 Fast: No error correction and can provide lower latency on error free lines. 


e Path1 Interleaved: Error checking that provides error free data which increases latency. 
e Path0 and Path1: If you are not certain which method is best, you can select both. 
Select Link Type : Select the linking protocol. EoA is the most popular with PPPoA a close second (used with many 
l legacy ISPs). Options are: 
e EoA: Ethernet over ATM. 
e PPPoA: Point-to-Point Protocol over ATM. 
e IPoA: Internet Protocol over ATM. 


Encapsulation Select whether multiple protocols or only one protocol is carried per PVC (Permanent Virtual 
Mode i Circuit). Options are: 


e LLC/ENCAPSULATION: (Available for PPOA only) Logical Link Control (LLC) encapsulation 
protocols used with multiple PVCs 

e LLC/SNAP-BRIDGING: LLC used to carry multiple protocols in a single PVC. 

e LLC/SNAP-ROUTING: (Available for IPoA only) LLC used to carry one protocol per PVC. 

e VC/MUX: Virtual Circuit Multiplexer creates a virtual connection used to carry one pro- 
tocol per PVC. 


ERA HEL ELE EET EE EO EE BEE EE ET ELE EE OS EE N TOE EE HT ENE TET 


Service Category : Select the bit rate protocol. Options are: 


e UBR without PCR: Unspecified Bit Rate with no Peak Cell Rate, flow control or time syn- 
chronization between the traffic source and destination. Commonly used with applic- 
ations that can tolerate data / packet loss. 

UBR with PCR: Same as above but with a Peak Cell Rate. 

CBR: Constant Bit Rate relies on timing synchronization to make the network traffic pre- 
dictable. Used commonly in Video and Audio traffic network applications. 

Non Realtime VBR: Non Realtime Variable Bit Rate used for connections that transport 
traffic at a Variable Rate. This category requires a guaranteed bandwidth and latency. It 
does not rely on timing synchronization between the destination and source. 

Realtime VBR: Realtime Variable Bit Rate. Same as the above option but relies on timing 
and synchronization between the destination and source. This category is commonly 
used in networks with compressed video traffic. 
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Field Name Description 


Minimum Cell : Minimum allowable rate (cells per second) at which cells can be sent on a ATM network. The 
: default is -1 (no shaping). 


Scheduler for ‘The algorithm used to schedule the queue behavior. VC scheduling is different than the default 
Queues of Equal : queues. Options are: 


Precedentes. e Weighted Round Robin: Packets are accessed in a round robin style. Classes can be 
the Default assigned 


ee Weighted Fair Queuing: Packets are assigned to a specific queue. 
Default Queue Weight: The default weight of the specified queue. Options are 1-63. 
Default Queue Precedence: The precedence of the specified group. Options are 1-8. 
VC WRR Weight: The weight of the specified virtual channel queue. Options are 1-63. 
VC Precedence: The priority of the specified virtual channel queue. Options are 1-8. 


PTM Interface 


The SmartRG gateway's VDSL2 standards support Packet Transfer Mode (PTM). An alternative to ATM mode, PTM transports 
packets (IP, PPP, Ethernet, MPLS, and others) over DSL links. For more information, refer to the IEEE802.3ah standard for Eth- 
ernet in the First Mile (EFM). Some 500 series gateways have a PTM interface configured by default. 


On this page, you can configure a PTM interface for your gateway. 


1. In the left navigation bar, click Advanced Setup > Layer2 Interface > PTM Interface and then click Add. The fol- 
lowing page appears. 
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PTM Configuration 


This sereen allows you to configure a PTM flow. 


Select DSL Latency 
E Patho (Fast) 
C Patht (interteaved) 


Select Scheduler for Queues of Equal Precedence as the Default Queue 
@ Weighted Round Robin 
O Weighted Fair Queuing 


Default Queue Weight: fy | {1-63} 

Default Oueue Precedence: D [1-8] flower value, higher priority) 
Default Queve Minimum Rate: " [1-41358 Kbps] (-1 indicates no shaping) 
Default Queue Shaping Rate: n [1-41358 Kbps) (-1 indicates no shaping) 
Default Queue Shaping Burst Size: ses | [bytes] (shall be >=1600) 


Back Apply /Same 


2. Modify the settings as desired. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name 


Weighted Round Robin 


Weighted Fair Oueuing 


Description 


‘Time slices are assigned to each process in equal portions and in circular order, hand- 
‘ ling all processes without priority (also known as cyclic executive). 


: A data packet scheduling technique allowing different scheduling priorities to be 

l assigned to statistically multiplexed data flows. Since each data flow has its own 

: queue, an ill-behaved flow (that sent larger packets or more packets per second than 
‘ the others since it became active) will only affect itself and not other sessions. 


EE cer TE LA ses we [one see OE scene EE EO IE DO HT ET ET ER ET 


Default Queue Weight 


‘Enter a default weight of the specified queue. Options are: 1-63. 


EE TE RE EE TEE EI EA EE HE HER MERE HOE AE EE IS NEE EE ss. 


Default Oueue Pre- 


Default Queue Shaping 
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‘The default minimum rate at which traffic can pass through the queue. For no shaping, 
| enter -1 (disabled). Options are: 1-0 Kbps. 


‘The shaping rate for the specified queue. Options are: 1-0 Kbps. The default is -1 (no 


‘Enter a precedence for the specified queue. Options are: 1-8. 
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Field Name Description 


: shaping). 


PERAE ETE EE Oe ses MERE AR E A SEE E E E E E E EES EEA A E S E E A T ALE T E TTS 


Default Queue Shaping ‘The maximum rate at which traffic can pass through the queue. Options are 1600 or 
Burst Rate : greater. 


ETH Interface 
On this page, you can configure an Ethernet interface for your gateway. 


Note: If a WAN port is already configured, you must remove it before you can define anew one. The Add button does not 
appear until the existing port is removed. Modify or delete any WAN service that uses it. Then, return to this page and click 
the Remove checkbox and then click the Remove button. 


1. In the left navigation bar, click Advanced Setup > Layer2 Interface > ETH Interface. If no WAN port is configured, 
the following page appears. 
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ETH WAN Configuration 
This screen allows you to configure a ETH port . 


Setect a ETH port: 


erha/LANL ~ 
[Bech] | Aomted beer | 


2. Click Add. 
3. Ifa WAN port is already configured or you clicked Add, the following page appears. 
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ETH WAN Interface Configuration 


Choose Add, or Remove to configure ETH WAN interfaces. 
Mow one ETH as layer 2 WAN interface. 


4. Select the LAN port you wish to act as a WAN port. 
5. Click Apply/Save to commit your changes. 
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WAN Service 


In this section, you can configure WAN services for: 


e "PPP over Ethernet" 
e "IP over Ethernet" 
e Bridging 


Instructions are provided for each variation. 


PPP over Ethernet 


There are several parts to configuring a PPP over Ethernet WAN service. You will progress through several pages to com- 
plete the configuration. 


1. In the left navigation bar, click Advanced Setup > WAN Service and then click Add. The following page appears. 
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WAN Service Interface Configuration 


Select a layer 2 interface for this service 


Note: For ATM interface, the descriptor string is (portid_vpi_vci) 
For PTM interface, the descriptor string is (portid_high tow) 
Where portide@ --> OSL Latency PATHO 
portidet --> OSL Latency PATHI 
portides --> OSL Latency PATMOË 1 
tow “0 --> Low PTM Priority not set 
iow st «> Low PTM Priority set 
high “0 --> High PTM Priority not set 
high =1 --> High PTM Priority set 
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2. Select the Layer2 interface to use for the WAN service and click Next. The following page appears. 
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WAN Service Configuration 


Select WAN service type: 

© PPP over Ethernet (PPPoE) 
O IP over Ethernet 

O Bridging 


Erter Service Onscription: 


For tagged service, enter valid 802. 1P Priority and 802. 1Q VLAN ID. 
For untagged service, set -1 to both 802. 1P Priority and 802. 1Q VLAN ID. 


Enter 802.1P Priority (0-7): 
Enter 802.1Q VLAN ID [0-4094]: 
Select VLAN TPID: 


Internet Protocol Selection: 


3. Select the PPP over Ethernet (PPPoE) WAN service type. 
4. Modify the other settings as needed, using the information in the following table. 
Field Name Description 


Enter Service ‘Enter aname to describe this configuration. 
Description 


Internet Pro- ‘Different scheduling priorities can be applied to statistically multiplexed data flows. Since each 

tocol Selection ‘data flow has its own queue, an ill-behaved flow (which has sent larger packets or more packets 
‘per second than the others) will only punish itself and not other sessions. Options are IPv4 Only, 
:IPv4&IPVv6 (Dual Stack), and IPv6 Only. 


‘Note: When you select IPV4&IPV6 or IPV6, the subsequent options presented will change 
‘accordingly. 
Enter 802.1P Pri- ‘Options are 0 - 7. The default is 0. 


ority i 
‘For tagged service, enter values in this field and the 802.10 VLAN ID field. 


‘For untagged service, enter -1 (disabled) in this field and the 802.1Q VLAN ID field. 
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Field Name Description 


Enter 802.1Q Options are 0 - 4094. The default is -1 (disabled). 


‘For tagged service, enter values in this field and the 802.1P Priority field. 


For untagged service, enter -1 (disabled) in this field and the 802.1P Priority field. 


Internet Pro- ':Select the IP version. Options are IPv4 Only, IPv4&IPv6 (Dual Stack), and IPv6 Only. 
tocol Selection 


5. Click Next. The following page appears. 
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PPP Username and Password 


PPP usually requires that you have a user name and patmeord to establish your commection. in the bores below, exter the 
uer name and password that your ISP has provided to you. 


C PPP iP extecsion 


Advanced DMI 
Non OMI IP 
Address: 

Non DMZ Net Mask: TH. Seb INA 2 


N. vak dr 


C vee Static Pot Adaren 


E) Retry PPP password on authentication error 

Man PPP authentication retries (145524): [as | duse E5534 to retry forever) 
C) brati PPP Drug Mode 

[C] Bridge PPPOE Frames Benaven WAN and Local Ports 

EA Enatis Fir owad 


Network Addres Tramlstion Settings 
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“Network Addres 1feralation Tettings 


Network Adres Translation (MAT) allows you to share one Wide Area Network (WAN) IP addren for multiple computers on 
your Local Area Network (LAM) 


E Erosie MAT 
[C] Estie Faicear MAT 
C) tasie sip an 


MP Multicast 
[C Erabi GAP Musica Prony 


CO] trasie IGMP Madticast Source 


MATU sae 1370-1492]: (aas g 


Euse Gase MAL Adres on this WAN interface (Hote: oniy select this for one WAN interface) 


6. Modify the fields as needed. 


The fields on this page are explained in the following table. 


Field Name Description 


PPP Username _ ‘Enter the username required for authentication to the PPP server. 


Authentication 
Method 


‘Select a means for authentication. Options are: 


e AUTO: Attempt to automatically detect handshake protocol (listed below)s. 
e PAP: Password Authentication Protocol (plaintext passwords). 


CHAP: Challenge Handshake Authentication Protocol. (MD5 hashing scheme on pass- 
words). 


MSCHAP: Microsoft Challenge Handshake Authentication Protocol. (Microsoft encrypted 
password authentication protocol). 


‘Enter the number of additional attempted packets that the gateway will send (in the event 
‘that the PPP server does not respond to the Keepalive) before giving up and declaring the con- 
‘nection as Failed. 


PPP IP Extension ‘Select whether to forward all traffic to the advanced DMZ IP specified in the next field. When 
you select this option, the NAT fields are hidden. 
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Field Name 


Advanced DMZ 


Enable IPv6 
Unnumbered 


Launch Dhcp6éc 
for Address 
Assignment 


Launch Dhcpéc 


for Prefix Deleg- 


ation (APD) 


Retry PPP pass- 


word on authen- 


tication error 


Enable PPP 
Debug Mode 


Bridge PPPOE 
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Description 


‘Specify the IP address and mask to which PPPoE traffic is forwarded. 


‘If using the Advanced DMZ feature, you can enter a specific vendor ID that will be broadcast for 
‘the DHCP server to accept the device, e.g., 192.168.2.1. 


‘If using the Advanced DMZ feature, you can enter a secondary LAN IP address for the gateway. 
‘The default is 255.255.255.0. 


‘ (Available only when IPv4&IPv6 (Dual Stack) is selected for the Interned Protocol field) 
‘Select to allow your gateway to process IP packets without configuring a unique IP address. This 
‘works by “borrowing” an IP address from another interface. 


‘ (Available only when IPv4&IPv6 (Dual Stack) is selected for the Interned Protocol field) 
‘Select to launch the dhcpéc client deamon to request and configure IPv6 addresses and host 
‘network configuration information. 


‘ (Available only when IPv4&IPv6 (Dual Stack) is selected for the Interned Protocol field) 
‘Select to enable your DHCPv6 server to allow your gateway to ask for an IPvé prefix (subnet) 
‘that it can then split up and delegate to the clients it serves. This option is selected by default. 


‘Enter the maximum number of PPP authentication retries on failure. Options are 1 - 65536. 
‘Entering 65536 sets the maximum to unlimited. 


‘Select to have the system put more PPP connection information into the system log of the 
‘device. This is for debugging errors and not for normal usage. 


‘Select to enable PPPoE passthrough to relay PPPoE connections from behind the modem. Also 


Frames Between ‘known as Half-Bridged mode. 


WAN and Local 


Enable Firewall 


Enable NAT 


Enable SIP ALG 
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‘Select to enable functions in the Security sub-menu. 


“Select to enable sharing the WAN interface across multiple devices on the LAN. Additional NAT 
‘and PPPoE NAT features appear. 


: (Appears when Enable NAT is selected) Click to enable Session Initiation Protocol (SIP) pass- 
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Field Name Description 


‘through NAT. Used for Voice over IP (VOIP) applications. 


Enable IGMP ‘Click to enable Internet Group Membership Protocol (IGMP) multicast. Used by IPv4 hosts to 
Multicast Proxy ‘report multicast group memberships to any neighboring multicast routers. 


Enable IGMP 
Multicast Source : 


‘Enter the MTU (Maximum Transmission Unit) size for SmartRG gateways supporting a gigabit-cap- 


‘able WAN interface. Options are 1370 - 1492 bytes. The default is 1492 bytes. 
‘Firmware v2.5.0.7 or later is required. 


Use Base MAC ‘Use the SmartRG Devices Base (Primary) MAC address. When unchecked, a unique MAC is 
Address on this ‘assigned for each service. 
WAN interface 


‘(Appears when Use Base MAC Address is deselected) Enter the MAC address to be used as the 
MAC Clone ‘close address. 
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7. Click Next. The following page appears. 
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Routing -- Default Gateway 


Defauit gateway interface tist can have multiple WAN interfaces served as system defaut gateways 
but only one wil be used according to the priority with the first being the higest and the last one 

the lowest priority if the WAN interface is connected. Priority order can be changed by removing 
al and adding them back in again. 


Selected Default 
Gateway Interfaces 


Ppp0 A 


8. Select the interface used as a default gateway for the PPP service being created and click the arrows to move your 
selection from left to right or from right to left. 
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9. Click Next. The following page appears where you will select DNS Server settings. 
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ONS Server Configuration 


Select ONS Server Interface from available WAN interfaces OR enter static ONS server IP addresses 
for the system. in ATM mode, if only a single PVC with IPod or static IPoE protocol ts configured, 
Static ONS server IP addresses must be entered. 

ONS Server Interfaces can have multiple WAN interfaces served as system dra servers but only one 
wil be used accor cing to the priority with the first being the higest and the last one the lowest 
priority if the WAM interface is connected. Priority order can be changed by removing al and adding 
them back in again. 


® Select ONS Server interface from available WAN interfaces: 
Selected ONS Server Available WAN 
Interfaces interfaces 


pppl.t 
ood. 


O uie the following Static DNS IP address: 


Primary OWS server: EE 


10. Select the DNS Server Interface from Available WAN interfaces and click the arrows to move your selection from left 
to right or from right to left. 


11. Alternatively, you can enter static DNS IP addresses in the Use the following Static DNS IP address section. 
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12. Click Next. The summary page appears indicating that your PPPoE WAN setup is complete. 
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WAN Setup - Summary 


Make sure that the settings below match the settings provided by your ISP. 


Click “Apply/Save” to have this interface to be effective. Click “Back” to make any modifications. 
[ma | | merwe | 


13. Review the summary and either click Apply/Save to commit your changes or click Back to step through the pages in 
reverse order to make any necessary alterations. 


IP over Ethernet 


There are several parts to configuring a IP over Ethernet WAN service. You will progress through several pages to complete 
the configuration. 
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1. In the left navigation bar, click Advanced Setup > WAN Service and then click Add. The following page appears. 
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WAN Service Interface Configuration 


Select a layer 2 interface for this service 


Note: For ATM interface, the descriptor string is (portid. vi. vei) 
For PTM interface, the descriptor string is (portid high. low) 
Where portid-@ --> DSL Latency PATHO 
portid=1 -> DSL Latency PATHI 
portide4 -> DSL Latency PATHOR1 


low “0 --> Low PTM Priority not set 
low st -> Low PTM Priority set 

high «0 -> High PTM Priority not set 
high =t -> High PTM Priority set 


[atmaj(o_0_35) ~] 
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2. Select the Layer2 interface to use for the WAN service and click Next. The following page appears. 
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WAN Service Configuration 


Select WAN service type: 

© PPP over Ethernet (PPPoE) 
© P over Ethernet 

O Bridging 


Enter Service Description: CIYEE 


For tagged service, enter valid 802. 1P Priority and 802.10 VLAN D. 
For untagged service, set -1 to both 802. 1P Priority and 802.1Q VLAN D. 


Enter 802, 1P Priority [0-7]: 
Enter 802. 1Q VLAN ID [0-4094]: 
Select VLAN TPID: 


Internet Protocol Selection: 
[vs only ~] 


3. Select the IP over Ethernet WAN service type. 
4. Modify the fields as needed. 


The fields on this page are explained in the following table. 


Field Name Description 


Enter Service l (Optional) Enter a name to describe this configuration. 
Description i 


Enter 802.1P Pri- l Options are 0 - 7. The default is -1 (disabled). 


For tagged service, enter values in this field and the 802.1Q VLAN ID field. 


For untagged service, accept the default of -1 in this field and inthe 802.1Q VLAN ID field. 
Enter 802.1Q VLAN | Options are 0 - 4094. The default is -1 (disabled). 
ID 
: For tagged service, enter values in this field and the 802.1P Priority field. 
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Field Name Description 


: For untagged service, accept the default of -1 in this field and in the 802.1P Priority field. 


Internet Protocol : This data packet scheduling technique allows different scheduling priorities to be applied to 
Selection ! statistically multiplexed data flows. Since each data flow has its own queue, an ill-behaved 
‘ flow (which has sent larger packets or more packets per second than the others since it 
: became active) will only punish itself and not other sessions. Options are IPv4 Only, IPv4&IPv6 
: (Dual Stack), and IPvé Only. The default is IPv4 Only. 


‘ Note: When selecting IPV4&IPV6 or IPV6, the subsequent options presented will change 
‘accordingly. 
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5. Click Next. The following page appears. 
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WAN IP Settings 


Enter information provided to you by your ISP to configure the WAN IP settings. 

Notice: If "Obtain an IP address automatically” is chosen, DHCP will be enabled for PVC in 
PoE mode. 

If "Use the following Static IP address” is chosen, enter the WAN IP address, subnet mask 
and interface gateway. 


@ Obtain an IP address automaticall 
Option 60 Vendor ID: 

Option 61 IAID: | (8 hexadecimal digits) 
Option 61 DUID: (hexadecimal digit) 
Option 77 User ID: | 
Option 125: OEnable 


Option 50 Request IP p 
Address: L 
Option 51 Request fe 3 
Leased Time: C — 


Option 54 Request Server 
Address: Lt 


© Use the following Static IP address: 
WAN IP Address: 

WAN Subnet Mask: 

WAN gateway IP 

Address: 


O Advanced DMZ 


Non DMZ IP Address: | *¥2.168.2.1 
Non DMZ Net Mask: [255,295.295.0 


6. Enter the relevant WAN IP Settings, using the information provided in the following table. 


Field Name Description 


Obtain an IP address auto- Select when you want the ISP to automatically assign the WAN IP to the gateway. 


Option 61 IAID (Optional) Interface Association Identifier (IAID). A unique identifier for an IA, chosen 
: by the client. 
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Field Name Description 


Option 61 DUID : (Optional) DHCP Unique Identifier (DUID) is used by the client to get an IP address from 
' the DHCP server. 


: (Optional) Select whether to enable local devices to automatically receive DHCP 
‘options from the server.This option is disabled by default. To enable it, click Enabled. 


‘Select to request a specific IP address when sending messages. If the address is not 
‘available, the DHCP server assigns the next allowed IP address. 


Select when you want to manually declare the static IP information provided by your 
l ISP. The WAN address fields become available. 


‘Enter the static WAN IPV4 Address. 


AP O P DI TO TE ORR LE EER EE EE EE E EN Stowe T EEE AN E EN HD 


‘Enter the static subnet mask. 


‘Enter the static gateway IP address. 


| (Optional) Select this option to enable Advanced DMZ on the WAN service. For more 
information, see the knowledgebase on SmartRG Support site. 


: If using the Advanced DMZ feature, you can enter a specific vendor ID that will be 
: broadcast for the DHCP server to accept the device, e.g., 192.168.2.1. 


; If using the Advanced DMZ feature, you can enter a secondary LAN IP address for the 
: gateway. The default is 255.255.255.0. 


IPv6 settings 


The following fields appear when either IPv6 Only or IPv4&IPv6 (Dual Stack) network protocols are selected on 
the WAN Service Configuration page. 


Obtain IPv6 address auto- : Enables the DHCPv6 Client on this WAN interface. Select this option when you want 
: the ISP to automatically assign the WAN IP to the gateway. 


Dhcpv6 Address Assign- : Select this option for the CPE to receive WAN IP from ISP. 
ment (IANA) è 


Dhcpv6 Prefix Delegation Select this option for the CPE to generate the WAN IP's prefix from the server's REST 
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Field Name Description 


(IAPD) by MAC address. 


Use the following Static : Select this option to manually declare the v6 Static IP information provided by your 
IPv6 address ' 


WAN IPv6 Address/Prefix : If entering a static IP address, enter the IP address / prefix length. If you do not spe- 
: cify a prefix length, the default of /64 is used. 


Specify the Next-Hop IPv6 ; Enter the IP address of the next WAN in the group. This address can be either a local 
address : link or a global unicast IPv6 address. 


7. Click Next. The NAT settings page appears. 
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Network Address Translation Settings 


Network Address Translation (NAT) allows you to share one Wide Area Network (WAN) IP 
address for multiple computers on your Local Area Network (LAN). 

EF Enable NAT 

O Enable Fulcone NAT 


HE Enable Firewall 
O Enable SIP ALG 


IGMP Multicast 
O Enable IGMP Multicast Proxy 


O Enable IGMP Multicast Source 


Muse Base MAC Address on this WAN interface (Note: only select this for one WAN 
interface) 


8. Click Next. 


9. Modify the settings if desired. All settings are optional. 
Network Address Translation (NAT) allows you to share one Wide Area Network (WAN) IP address for multiple 
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computers on your Local Area Network (LAN). If you do not want to enable NAT (atypical) and wish the user of this 
gateway to access the Internet normally, you need to add a route on the uplink equipment. Failure to do so will 
cause access to the Internet to fail. 


The fields on this page are explained in the following table. 


FIELD NAME DESCRIPTION 


Enable NAT l Enable sharing the WAN interface across multiple devices on the LAN. Also enables the 
i functions in the NAT sub-menu and addition PPPoE NAT features to select. 


: Note: This option and its related options are not available when IPv6 is selected as the 
: Internet protocol. 


Enable Fullcone NAT : (Appears when Enable NAT is selected) Enables what is known as one-to-one NAT. 


Enable SIP ALG (Appears when Enable NAT is selected) Enables Session Initiation Protocol (SIP) pass- 
through NAT. Used for Voice over IP (VOIP) applications. 


Enable Firewall : Select to enable functions in the Security sub-menu. 


EE BEE EE ER EE ATEISTE ER OES EP HUL AE LEMOEN 


Enable IGMP Multicast : Click to enable Internet Group Membership Protocol (IGMP) multicast. Used by IPv4 hosts 
; to report multicast group memberships to any neighboring multicast routers. 


Use Base MAC Address Use SmartRG Devices Base (Primary) MAC address. When unchecked, a unique MAC per 
on this WAN interface : service is assigned. 
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10. Click Next. The following page appears. 
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Routing -- Default Gateway 


Default gateway interface list can have multiple WAN interfaces served as system default 
gateways but only one will be used according to the priority with the first being the 
higest and the last one the lowest priority if the WAN interface is connected. Priority 
order can be changed by removing all and adding them back in again. 


Available Routed WAN 
Interfaces 


| atmn0.2 
oth3.1 
pppl.t 


11. Select the interface used as a default gateway for the PPP service being created and click the arrows to move your 


selection from left to right or from right to left. 
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12. Click Next. The following page appears where you will select DNS Server settings. 
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DNS Server Configuration 


Select DNS Server interface from available WAN interfaces OR enter static ONS server IP 
addresses for the system. In ATM mode, if only a single PVC with IPoA or static IPoE 
protocol is configured, Static DNS server IP addresses must be entered. 

ONS Server Interfaces can have multiple WAN interfaces served as system dns servers but 
only one will be used according to the priority with the first being the higest and the last 
one the lowest priority if the WAN interface is connected. Priority order can be changed 
by removing al and adding them back in again. 


@ Select ONS Server Interface from available WAN interfaces: 
Selected DNS Server Available WAN 


© Use the following Static DNS IP address: 
Primary ONS server: 


Secondary DNS server: 


13. Select the DNS Server Interface from available WAN interfaces and click the arrows to move your selection from left 
to right or from right to left. 


14. Alternatively, you can enter static DNS IP addresses in the Use the following Static DNS IP address section. 


15. If you selected IPv6 as the Internet protocol earlier, you can configure the same DNS server information in the fol- 
lowing fields: 


e Obtain IPv6 DNS info from a WAN interface: Select a WAN Interface. 


e Use the following Static IPvé DNS address: Enter the Primary IPvé DNS server address and, if desired, 
enter a Secondary IPv6 DNS server address. 
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16. Click Next. The summary page appears. 
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WAN Setup - Summary 
Make sure that the settings below match the settings provided by your ISP. 


10735 


ipoe_0_0_35 


Automatically Assigned 


: . Disabled | 


Glick “Apply/Save” to have this interface to be effective. Click "Back" to make any 
modifications. 


17. Review the summary and either click Apply/Save to commit your changes or click Back to step through the pages in 
reverse order to make any necessary alterations. 


Bridging 


Before you can configure a bridge WAN service, you must create the related ATM interface. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL. ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


1. In the left navigation bar, click Advanced Setup > WAN Service and then click Add. The following page appears. 
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WAN Service Interface Configuration 


Select a layer 2 interface for this service 


Note: For ATM interface, the descriptor string is (portid. vi. vei) 
For PTM interface, the descriptor string is (portid high. low) 
Where portid-@ --> DSL Latency PATHO 
portid=1 -> DSL Latency PATHI 
portide4 -> DSL Latency PATHOR1 


low “0 --> Low PTM Priority not set 
low st -> Low PTM Priority set 

high «0 -> High PTM Priority not set 
high =t -> High PTM Priority set 


[atmaj(o_0_35) ~] 
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2. Select an ATM interface for the WAN service and then click Next. The following page appears. 
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WAN Service Configuration 


Select WAN service type: 

O PPP over Ethomet (PPPoE) 

© IP over Ethemet 

@ Bridging 

C Allow as IGMP Multicast Source 
CO Allow as MLD Multicast Source 


Enter Service Description: [br.2.0.3 


For tagged service, enter valid 802.1P Priority and 802.1Q VLAN ID. 
For untagged service, set -1 to both 802.1P Priority and 802.1Q VLAN ID. 


Enter 802.1P Priority {0-7}: 
Enter 802.1Q VLAN ID [0-4094]: 
Select VLAN TPID: 


3. Select Bridging. The Multicast Source fields appear. 
4. Modify the other fields as needed, using the information in the following table. 


Field Name Description 


Allow as IGMP Multicast : Select to enable this service to act as an IGMP multicast source. 


Enter 802.1P Priority —: Options are 0 - 7. The default is -1 (disabled). 


; For tagged service, enter values in this field and the 802.1Q VLAN ID field. 


For untagged service, accept the default of -1 in this field and in the 802.1Q VLAN ID 
: field. 
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Field Name Description 


Enter 802.1Q VLAN ID  : Options are 0 - 4094. The default is -1 (disabled). 


: For tagged service, enter values in this field and the 802.1P Priority field. 
‘ For untagged service, enter -1 (disabled) in this field and in the 802.1P Priority field. 


Select VLAN TPID : (Optional) Select the TPID for this VLAN. Options are 0x8100, 0x88A8, and 0x9100. 


5. Click Next. The summary page appears indicating that your Bridging WAN setup is complete. 
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WAN Setup - Summary 


Make sure that the settings below match the settings provided by your ISP. 


Click “Apply/Save* to have this interface to be effective. Glick “Back” to make any 
modifications. 


Beck Apply Sane 


6. Review the summary and either click Apply/Save to commit your changes or click Back to step through the pages in 
reverse order to make any necessary alterations. 


LAN 


On the Local Area Network (LAN) Setup page, you can configure the router’s local IP addresses, subnet mask, DHCP behavior 
and other related LAN side settings for your gateway. 
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1. In the left navigation bar, click Advanced Setup > LAN. The following page appears. 
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Local Area Network (LAN) Setup 


Configure the Broadband Router IP Address and Subnet Mask for LAN interface. 
GroupName | Default v 


P Address: 
Subnet Mask: HHH | 


Enable IGMP Snooping 


O Standard Mode 
@ Blocking Mode 


Enable IGMP LAN to LAN Multicast: Disable ~ 
(LAN to LAN Multicast is enabled until the first WAN service is connected, regardess of 
this setting.) 


C Enable LAN side firewall 


© Disable DHCP Server 

@ Enable DHCP Server 
Start PAddress: [wmawara | 
End IP Address: [Wa wat | 
Leased Time (hour) | 


Static P Lease List: (A maximum 32 entries can be configured) 


Automatically create static IP leases for the following OUIs: 


Configure DHCP Options: 
(TFTP Server Name) 
(Comma-seperated tist of TFTP Server v4 


2. Customize the fields as desired. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 
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Field Name Description 


GroupName ; Select an interface group from the list of available groups (defined on the Interface Group- 
: ing page). 


Subnet Mask ; Enter the Subnet mask to be used by LAN devices connecting to this gateway. 


Enable IGMP Snooping: Enables your gateway to listen to IGMP network traffic between hosts and routers. By listen- 
i ing to these conversations, the gateway maintains a map of which links need which IP mul- 
: ticast streams. 


: Allows multicast traffic will flood to all bridge ports when there is no client subscribed to 
: any multicast group. 


Blocks multicast data traffic, preventing it from flooding to all bridge ports when no client 
' Uppies toa multicast group are present. 


Enable IGMP LAN to 
LAN Multicast 


Enable LAN Side Fire- : Enables the restriction of traffic between LAN hosts. 


prevents the DHCP functionality of your gateway from automatically assigning LAN 
: IP addresses to host devices as they connect with the gateway. 


' Allows the DHCP functionality of your gateway to automatically assign LAN IP addresses to 
; host devices as they connect with the gateway. Fill in the next three fields to configure 
‘ this action. 


(Becomes editable when Enable DHCP Server is selected) Enter the beginning of the class 
! C, IP address range to be assigned by the DHCP server. 


l (Becomes editable when Enable DHCP Server is selected) Enter the end of the class C, IP 
; address range to be assigned by the DHCP server. 


: (Becomes editable when Enable DHCP Server is selected) Enter the number of hours for 
: which an IP address will be leased. 


Static IP Lease List l Specify a literal, static IP address to be associated with a specific MAC Address of one of 
: your LAN host devices. 


1. Click Add Entries. 
2. Enter the MAC address and IP address and click Apply/Save. 
3. Repeat this step to create any additional entries that you need up to 32. 
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Field Name Description 


Automatically create ; For LAN hosts, IP addresses can be assigned manually or by using DHCP. Click Add OUI. 
static IP leases from ' Enter the OUI and click Apply/Save. Repeat these steps to create any additional entries 
the following OUIs : that you need. 


‘For devices that require access toa TFTP server (device configuration name files are in .cnf 
' file format), which enables the device to communicate with other infrastructure, select 
‘ this option to specify the name of the TFTP server. 


Configure the second : When you select this option, the IP Address and Subnet Mask fields appear where you can 
IP address and sub- ' enter a second IP address and Subnet mask to support a second, simultaneous LAN, i.e., the 
net mask for LAN : primary LAN might be defined as 192.168.0.1 and this secondary LAN defined as 192.168.2.1. 
interface ' 
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IPv6 Autoconfig 
On this page, you can configure your gateway's IPv6 environment. 


1. In the left navigation bar, click Advanced Setup > LAN > IPvé Autoconfig . The following page appears. 
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IPv6 LAN Auto Configuration 

Note: Stateful DHCPv$ is supported based on the assumption of prefix length bess than 64. Interface ID 
does NOT support ZERO COMPRESSION “::". Please enter the complete information. For exampe: Please 
enter "0:0:0:2" instead of “::2". 


Static LAN IPv6 Address ‘ation 
interface Address (prefix length is required): 


1Pv6 LAN Applications 
Enable OHCPv6 Server 
® Stateless 
O Stateful 
Start interface ID: eow: 
End interface D: comm 
Leased Tine (hour): 


© Enable RADVO 


O Enable ULA Prefix Advertisement 
© Randomly Generate 
© Statically Configure 
Prefix: 


Preferred Life Time (hour): + 
Valid Life Time (hour): ~ 
Enable MLD Snooping 


O Standard Mode 
@ Blocking Mode 


Enable MLD LAN to LAN Multicast: [Drbe v] 
(LAN to LAN Multicast is enabled until the first WAN service is connected, regardless of this setting.) 


Sere aoo 


2. Modify the fields as needed, using the information in the table below. 
3. Click Save/Apply to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Interface Address IPV6 address to assign as the gateways Local LAN IPV6 address and prefix length. Prefix length is 
‘required. 


Enable DHCP v6 : Enable the DHCP v6 feature on the LAN. 
Server ' 
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Field Name Description 


Enable DHCP Server - : This option is selected by default. Click to stop inheriting IPV6 address assignments from the WAN 
Stateless : IPV6 interface. 


Enable DHCP Server -: DHCPv6 server given by the LAN IPV6 network as configured with additional options. Zero com- 
Stateful : pression is not supported. Make sure to enter zeros between the colons, that is, do not use short- 
hand notation (::2). Options are: 
e Start interface ID: Enter the beginning IPv6 available addresses for DHCP to assign to LAN 
devices. 
e End interface ID: Enter the ending IPv6 available addresses for DHCP to assign to LAN 
devices. 
e Leased Time (hour): Amount of time before a new IPv6 lease is requested by the LAN cli- 


Enable RADVD ‘ (Optional) This option is enabled by default. It enables Router Advertisement Daemon (RADVD) ser- 
‘vice that sends router advertisements to LAN clients. Clear the check box to disable RADVD. 
: Options are: 

e Enable ULA Prefix Advertisement: Check this option to enable unique local address (ULA) 
advertisement on the LAN. When you select this option, the Randomly Generate option is 
selected and the gateway can generate a random IPv6 prefix. 

Statically Configure Prefix: Select this option to configure the IPv6 prefix, and enter values 
in the Preferred Life Time and Valid Life Time fields (in hours). The default value for 
these fields is -1 (no limit). 


Enable MLD Snooping (Optional) This option is enabled by default. It enables Multicast Listener Discovery (MLD) snooping 
to manage IPV6 multicast traffic. Options are: 


e Standard Mode: Multicast traffic will flood to all bridge ports when no client subscribes toa 
multicast group even if IGMP snooping is enabled. 

e Blocking Mode: The multicast data traffic will be blocked and not flood to all bridge ports 
when there are no client subscriptions to any multicast group. This is the default. 


Enable MLD LAN to : (Optional) This option is enabled by default. It enables LAN-to-LAN Multicast until the first WAN ser- 
LAN Multicast ‘ vice is connected. Options are Disable and Enable. 


Ethernet Config 


On the Ethernet Port Configuration page, you can set the speed and duplex mode for each of the Ethernet ports. 
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1. In the left navigation bar, click Advanced Setup > Ethernet Config . The following page appears. 
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* Always configure 1000BaseT connections with Auto. 


‘Save! booty 


2. In the Configure column, select an option (Auto, 100 Full, 100 Half, 10 Full or 10 Half) for the Ethernet port on 
your gateway. 


These options represent 100 megabits or 10 megabits using half or full duplex transmission protocols. When you have 
a specific device with a known limited transmission speed capability, select one of the latter four options. If you 


select Auto, your gateway will automatically select an appropriate setting based on Ethernet auto negotiation with 
the NIC of the LAN host. 


Note: For 1000 BaseT connections, always select Auto. 


3. Click Save/Apply to commit your changes. 
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NAT 


In this section, you can configure the settings for Network Address Translation including setting up virtual servers, port trig- 
gering and DMZ host. There is seldom need to customize these settings as the default settings manage the related features 
sufficiently for most environments. 


Virtual Servers 


Virtual Servers (more commonly known as port forwards) is a technique used to facilitate communications by external hosts 
with services provided within a private local area network. 


On this page, you can configure the virtual server settings for your gateway. 


1. In the left navigation bar, select Advanced Setup > NAT. The following page appears. 
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NAT -- Virtual Servers Setup 

Virtual Server allows you to direct incoming traffic from WAN side (identified by Protocol and External port) to the 
Internal server with private IP address on the LAN side. The Internal port is required only if the external port needs to 
be converted to a different port number used by the server on the LAN side. A maximum 96 entries can be configured. 


Skype UOP at 
aoe 168.1.2:41273 pimd.1 
(3557) 

Skype TCP at 
Fed 168.1.2:41273 41273 41273 41273 ER] 
(3557) 
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2. Toadd a virtual server, click Add. The following page appears. 
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NAT ~ Virtual Servers 


Select the service name, and enter the server P address and dick “Apply /Save" to forward P packets 
for this service to the specified server. NOTE: The “Internal Port End” cannot be modified directly. 
Normally, it is set to the same value as “External Port End”. However, if you modify “Internal Port 
Start”, then “Internal Port End” will be set to the same valve as “Internal Port Start”. 

Remaining number of entries that can be configured: 94 


Use interface [ipoe 0.0 3S/etm0.2 ~) 
Service Name: 
@ Select a Service: | Select One 


O Custom Service: ] 


Server P Address: [wa eas 


| 


i 


3. Customize the fields to create your port forwarding entry, using the information provided in the table below. 
4. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Use Interface l Select the WAN interface to which this NAT rule will apply. 


ENTE TETTE TEE EE EA EIE des AE RE EL EE HE OO TEE LE II ER IE EE TE ETE 


Select a Service : Select from a list of application that typically require port forwards configured. The port ranges 


and protocol fields will be pre-populated. 


Custom Service : If your application does not appear in the Select a Service list, you can enter a unique name for 
: the application in this field. 
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Field Name Description 


Server IP l Enter the IP address of the LAN client where the service is hosted. 


Protocol ' Select the protocol to be used with this range of ports. Options are: TCP, UDP, or TCP/UDP. 
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Internal Port ; Enter the first internal port for this server. 


Internal Port End ; Enter the last internal port for this server. 


Port Triggering 


Some applications require that specific ports in the gateway's firewall be opened for access by remote parties. The Port Trig- 
ger feature dynamically opens up the open ports in the firewall when an application on the LAN initiates a TCP/UDP con- 
nection to a remote party using the triggering ports. The gateway allows the remote party from the WAN side to establish 
new connections back to the application on the LAN side using the Open Ports. 


1. In the left navigation bar, click Advanced Setup > NAT > Port Triggering and then click Add. The following page 
appears. 
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NAT -- Port Triggering 


Some applications such as games, video conferencing, remote access applications and others require 
that specific ports in the Routers firewall be opened for access by the applications. You can configure 
the port settings from this screen by selecting an existing application or creating your own (Custom 
application jand dick “Save/Apply” to add it. 

Remaining number of entries that can be configured:96 


Use Interface [goe 0.0 3S/atmo2 ~] 
Application Name: 


@ Select an application: | Select One ~ 
© Custom application: |_ 


2. Customize the fields as needed for the firewall pinholes you wish to establish. A maximum 96 entries can be con- 
figured. 


3. Click Apply/Save to commit your changes. If the selected service configures multiple servers, the same number of 
entries are added to the table of the NAT - Virtual Servers Setup page. 


The fields on this page are explained in the following table. 


Field Name Description 


Use Interface l Select the interface for which the port triggering rule will apply. 


Select a Service l Select the application which requires a port trigger entry. The starting and ending IP 
‘addresses and port numbers that are configured for the service are populated into the 


l table at the bottom of the page. 


l If the application you want does not appear in the selection list, enter a unique name for 
the application for which you are creating a port trigger entry. This is a free-form text field. 


Trigger Port Start : Enter the starting number of the range of available outgoing trigger ports. Options are: 1 - 
' 65535. 
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Field Name Description 


Trigger Port End : Enter the end number of the range of available outgoing trigger ports. Options are: 1 - 


: Select the protocol required by the application that will be using the ports in the specified 


' range. Options are: TCP, UDP, and TCP/UDP. 


Open Port Start | Enter the starting number of the range of available incoming ports. Options are: 1 - 65535. 
Open Port End : Enter the end number of the range of available incoming ports. Options are: 1 - 65535. 
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Open Protocol : Select the protocol for the open port. Options are: TCP, UDP, and TCP/UDP. 


DMZ Host 


The Broadband Router will forward IP packets from the WAN that do not belong to any of the applications configured in the 
Virtual Servers table to the DMZ host computer. If you want to route all internet traffic to a specific LAN device with no fil- 
tering or security, add the IP address of that device to this page. 


1. In the left navigation bar, click Advanced Setup > NAT > DMZ Host. The following page appears. 
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NAT -- DMZ Host 


The Broadband Router will forward IP packets from the WAN that do not belong to any 
of the applications configured in the Virtual Servers table to the DMZ host computer. 


Enter the computer's IP address and dick ‘Apply’ to activate the DMZ host. 


Gear the IP address field and dick ‘Apply’ to deactivate the DMZ host. 


DMZ Host IP Address: | ] 


Savevappty 


2. Enter the DMZ Host IP Address. 
3. Click Apply/Save to commit your change. 


Security 


In this section, you can configure filtering for IP and MAC addresses. 
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IP Filtering - Outgoing 
On this page, you can add an outgoing filter when refusal of data transmitted from the LAN to the WAN is desired. 


1. In the left navigation bar, click Advanced Setup > Security > IP Filtering and then click Add. The following page 
appears. 
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Add IP Filter -- Outgoing 


The screen allows you to create a filter rule to identify outgoing IP traffic by 
specifying a new filter name and at least one condition below. All of the specified 
conditions in this filter rule must be satisfied for the rule to take effect. Click 
'Apply/Save' to save and activate the filter. 


Filter Name: 


IP Version: 
Protocol: 
Source P address{/prefix length]: | 


————— 
Source Port (port or port:port): | 
Destination IP address /prefix length}: 


Destination Port (port or port:port): | 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit the completed entry. 


The fields on this page are explained in the following table. 


Field Name Description 


Filter Name Enter a descriptive name for this filter. 


IP Version l For the filter to be configured and effective for IPV6 , the gateway must be installed on a net- 
' work that is either a IPV6-only network (with that protocol enabled) or is both IPV4 and IPV6 dual 
‘ protocol enabled/configured. Options are IPv4 and IPv6. The default is IPv4. 


If you select IPV6, both the Source and Destination IP address must be specified in IPV6 format. 
: The following is an IPV6-compliant, hexadecimal address: 
‘ 2001:0DB8:AC10:FE01:0000:0000:0000:0001. 


: Select the protocol profile for the filter you are defining. TCP/UDP is most commonly used. The 
: options are TCP/UDP, TCP, UDP, and ICMP. 
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Field Name Description 


Source IP , Enter the source IP address of a LAN side host for which you wish to filter /block outgoing traffic 
address [/prefix for the specified protocol(s). 


length] ' 
‘ Note: This address can be a particular address or a block of IP addresses on a network subnet. 


: This is done by appending the associated routing "/prefix" length decimal value (preceded with 
the slash) to the addresses. A valid decimal routing prefix is required for defining the subnet 
‘ mask per CIDR notation. 


Source Port (port ; Set the outgoing host port (or range of ports) for the above host (or range of hosts defined by 
or port:port) ! optional routing "/prefix" subnet mask) to define the ports profile for which egress traffic will be 
: filtered from reaching the specified destination (s). 


Destination IP : Enter the destination IP address of a LAN side host for which you wish to filter /block outgoing 
address l traffic for the specified protocol (s). 


‘Note: This address can be a particular address or a block of IP address on a network subnet. This 
is done by appending the associated routing "/prefix" length decimal value (preceded with the 

‘ slash) to the addresses. A valid decimal routing prefix is required for defining the subnet mask 

l per CIDR notation. 


Destination Port ‘Set the destination host port (or range of ports) for the above host (or range of hosts) to define 

(port or port:- the destination port profile for which the filtered host egress traffic will be filtered from reach- 

port) ‘ing the otherwise intended destination(s), e.g., to block the traffic to those ports on, say, a com- 
puter external to the local network. 


IP Filtering - Incoming 
On this page, you can add an incoming filter when refusal of data from the WAN to the LAN is desired. 


1. In the left navigation bar, click Advanced Setup > Security > IP Filtering > Incoming and then click Add. The fol- 
lowing page appears. 
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Add IP Filter -- Incoming 


The screen allows you to create a filter rule to identify incoming IP traffic by 
specifying a new filter name and at least one condition below, All of the specified 
conditions in this filter rule must be satisfied for the rule to take effect. Click 
‘Apply Save’ to save and activate the filter. 


Filter Name: 


IP Version: 
Protocol: 
Source IP address[/ prefix length}: 


Source Port (port or port:port): 

Destination IP address[/prefix length]: 

Destination Port (port or port:port): 

WAN Interfaces (Configured in Routing mode and with firewall enabled) and LAN 
interfaces 

Select one or more WAN/LAN interfaces displayed below to apply this rule. 


E Select ALM ipoe 0.0 35/atm0.2H ipoe_eth3/eth3.14 
pppoe 0 0 3.5/pppt.1É1 pppoe_0_0_1/ppp0 A brd/brd 


dept are 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 
Filter Name ‘Enter a descriptive name for this filter. 


‘Select the protocol to be associated with this incoming filter. Options are: 
: TCP/UDP, TCP, UDP, or ICMP. 


Destination IP address [/prefix 
length] 


WAN Interfaces : Click to apply this rule to all WAN interfaces or only certain types. Options 
‘are Select All or the interfaces defined for your network. 
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MAC Filtering 


Your SmartRG gateway can block or forward packets based on the originating device. This MAC filtering feature is available 
only in Bridge mode. For other modes, similar functionality is available via IP Filtering. 


On this page, you can manage MAC filtering for your gateway. 


1. In the left navigation bar, click Advanced Setup > Security > MAC Filtering. The following page appears. 
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MAC Filtering Setup 


MAC Filtering is only effective on ATM PVCs configured in Bridge mode. FORWARDED 
means that all MAC layer frames will be FORWARDED except those matching with any of 
the specified rules in the following table, BLOCKED means that all MAC layer frames will 
be BLOCKED except those matching with any of the specified rules in the following 
table. 


MAC Filtering Policy For Each interface: 


WARNING: Changing from one policy to another of an interface will cause all defined 
rules for that interface to be REMOVED AUTOMATICALLY! You will need to create new 


Choose Add or Remove to configure MAC filtering rutes. 


2. To modify policy settings: 
a. Review the information on the page. 


b. Once you understand the consequences of changing the policy, click the Change checkbox, and then click 
Change Policy. The policy is switched to FORWARD or BLOCKED. 


3. Toadd a rule, follow the instructions in "MAC Filtering”. 
Toremove arule, click the Remove checkbox next to the rule and click the Remove button. 
5. When your changes are completed, click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Interface ‘The interface associated with an established policy rule. 
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Adding a MAC Filtering Rule 
You cannot edit rules but you can add new ones and then remove the obsolete ones. 


1. On the MAC Filtering page, click Add. The following page appears. 
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Add MAC Filter 


Create a filter to identify the MAC layer frames by specifying at least one condition 
below. If multiple conditions are specified, al of them take effect. Click “Apply” to save 
and activate the filter, 


f 


Protocol Type: | v] 
Destination MAC Address: | | 
Source MAC Address: | 


Frame Direction: [LAN<=>WAN ~] 


WAN interfaces (Configured in Bridge mode onty) 


(br_0_0_35.7/atm0.3 ~] 


2. Fill in the fields, using the information provided in the following table. 
3. Click Save/Apply to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Protocol Type : Select the protocol associated with the device at the destination MAC address. Options are 
: PPPoE, IPv4, IPv6, AppleTalk, IPX, NetBEUI, and IGMP. 


Source MAC ‘Enter the MAC address of the device that is originating requests intended for the device asso- 
‘ciated with the Destination MAC Address. 


Frame Direction : Select the incoming/outgoing packet interface. Options are LAN<=>WAN, WANS-LAN, and LAN- 
: N=>WAN. The default is LAN<=>WAN. 


WAN Interfaces : Select the interface to which the filter should be applied. 


Parental Control 


In this section, you can configure the Parental Control features of your SmartRG gateway to restrict Internet access to cer- 
tain hours and to certain URLS. 
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Time Restriction 


On this page, you can restrict Internet access to particular days and specific times for each device that accesses your gate- 
way. 


1. In the left navigation bar, click Advanced Setup > Parental Control and then click Add. The following page appears. 
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Access Time Restriction 


This page adds time of day restriction to a special LAN device connected to the Router. 
The Browsers MAC Address’ automatically displays the MAC address of the LAN device 
where the browser is running. To restrict other LAN device, dick the “Other MAC 
Address” button and enter the MAC address of the other LAN device. To find out the 
MAC address of a Windows based PC, go to command window and type “ipconfig / al”. 


User Name il j 


d 


@ Browsers MAC Address (20-44 bote | 
O Other MAC Address = = 
(O) Sa 


Start Blocking Time 
(hh:mm) 
End Blocking Time (hh:mm) 


2. Fill in the fields using the information in the table below. 
3. Click Apply/Save. 


The fields on this page are explained in the following table. 


Field Name Description 


User Name ‘Enter a descriptive name for this restriction. 


BEER AE EE ER ates AE LE AE EE EE TERRE N eis DE stare se ERF 


; This option is selected by default. The MAC address of the connected device is shown. 


EET EER EE secs ste ELE RE sees Seve sat ees nie cent ee Ses Pes 552 S055 555555 656552 


Other MAC Address Select this option to restrict access to another device. Enter the MAC address of that 
' device. 


' Note: You can view a list of the connected devices and MAC addresses on the Device 
: Info > ARP page. 
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Field Name Description 


Days of the week : Select the days (Mon - Sun) for which the restrictions apply. 


A E ERRE r A LAE A RE EE EA IEEE EEE ED ETE EE EE LEI EE EE ES 


Start Time Blocking / End ; Enter the range of time that the devices listed above are restricted from access to the 
Time Blocking Internet. Use 24-hour clock notation (00:00 - 24:00). 


URL Filter 


The other side of the Parental Controls coin is URL filtering. On this page, you can exclude and include URLs as desired. 
Each list can include up to 100 addresses. 


Note: Only one Exclude list and one Include list are supported for each gateway. Unique lists are not supported for con- 
necting devices. 


1. In the left navigation bar, click Advanced Setup > Parental Control > Url Filter. 
2. To block a URL: 

a. Next to URL List Type, select Exclude. 

b. Click Add. The following page appears. 
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Parental Control -- URL Filter Add 


Enter the URL address and port number then click `Apply/Save” to add the entry to the 
URL filter. 


URL Address: 
Port hars == (Default 80 will be applied if leave 


blank.) 


c. Click Apply/Save to save your settings. You are returned to the Url Filter page. 
3. Tocreate alist of URLs to allow, next to URL List Type, select Include and repeat the above steps. 


The fields on this page are explained in the following table. 


Field Name Description 


URL Address ‘Enter the URL address to be included in the list. 
Port Number : (Optional) Enter the port number associated with the URL. The default is 80. 
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Quality Of Service 


Quality of Service (QoS) enables prioritization of Internet content to help ensure the best possible performance. This is par- 
ticularly useful for streaming video and audio content with minimized potential for drop-outs. QoS becomes significant when 
the sum of all traffic (audio, vid"QoS Classification"data) exceeds the capacity of the line. 


In this section, you can configure QoS settings including traffic queues, classifications (rules) and port shaping. 

Note: Before proceeding, make sure that the necessary WAN service has been configured with the appropriate Priority set- 
ting. 

QoS Config 

On this page, you can enable QoS and set the DSCP Mark classification. 


The maximum number of queues that can be configured vary by mode, as shown below. 


Maximum # of queues 


Note: Queues for Wireless (e.g., WMM Voice Priority) are shown only when wireless is enabled. If the WMM Advertise func- 
tion on the Wireless Basic Setup page is disabled, assigning classifications to wireless traffic has no effect. 
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1. In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Config. The following page appears. 
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QoS - Queue Management Configuration 


If Enable QoS checkbox is selected, choose a default DSCP mark to automatically mark 
incoming traffic without reference to a particular classifier. Click 'Apply/Save' button to 
save it. 


Usage Notes: 
If the Enable QoS checkbox is not selected, all QoS will be disabled for all interfaces. 


The default DSCP mark is used to mark al egress packets that do not match any 
dassification rules. 


QoS and a non-default queue are highly recommended for PPP WAN services. Each time 
a PPP WAN service starts or resets, if a non-default queue does not exist, one will be 
created and QoS automatically enabled. 


© Enable QoS 


Select Default DSCP Mark [No Change(-1) ~ 


2. If the Enable QoS checkbox is not checked, click it to select it. 
Warning: If this option is already enabled and you clear the checkbox, QoS will be disabled for ALL interfaces. 


3. Inthe Select Default DSCP Mark field, select the Differentiated Services Code Point (DSCP) Mark classification value 
to be used. The default is No Change(-1). For a list of supported values, see "Supported DSCP Values". 


4. Click Apply/Save to save your settings. 


Supported DSCP Values 


The DSCP marking QoS Queue Management Configuration marking on ingress packets is based on the selection you make in 
the Select Default DSCP Mark field. The selected default marking is applied automatically to all incoming packets without 
reference toa particular classification. 


Note: A default DSCP mark value of Default(000000) will mark all egress packets that do NOT match any classification. 


The following values are supported. For more information about commonly used DSCP values, refer to RFC 2475. 


No Change(-1) : €$1(001000) : AF32(011100) 


Auto Marking(-2) : AF23(010110) 
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Default (000000) : AF22(010100) * CS3(011000) 


AF12(001100) : CS2(010000) : AF42(100100) 


ETES EET RE EET EET EET ee ee TR RT ET ET ER ER ER TT he eee ee eee 


AF11(001010) : AF33(011110) : AF41 (100010) 


QoS Queue Config 
On this page, you can configure a queue and add it to a Layer2 interface. 


1. In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Queue Config and then click Add. The 
following page appears. 
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QoS -- Configuration 


This screen allows you to configure a QoS queue and add it to a selected 
layer? interface. 


(Only one queue can be defined for any one interface/precedence pair, 
resulting in a madmum of three queues per interface.) 
Name: 


Enabie: ‘Enable ~] 


2. Inthe Name field, type a descriptive name for this queue. 
3. In the Interface field, select the Layer 2 interface to be associated for this queue. Additional fields appear. 


Fill in the fields, using the information provided in the table below. 
Note: For Dynamic WAN interfaces, the Queue Priority settings appear twice - once for ATM WAN QoS configuration 


and once for PTM WAN QoS configuration. 
5. Click Apply/Save to save your settings. 


The fields on this page are explained in the following table. 
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Field Name Description 


Enable : Select to enable or disable this queue configured on the selected interface. This option is 
: enabled by default. 


‘ Note: Only one queue can be defined for any one interface/precedence pair, resulting in a 
‘maximum of three queues per interface. 


Queue Pre- : Select the priority value to be associated with the new queue. Options vary by interface type 
cedence/ : and include 1(SP - 4(SP), 1(WRR/WFQ) - 7(WRR/WFQ), and 8(WRR). 


Precedence ' 
‘ Note: The lower the value, the higher the priority. 


Scheduler (Not applicable for ETH interfaces) Select an algorithm for applying queue data priority. 
Algorithm : Options are: 


e Weighted Round Robin: Applies a fair round robin scheme weighting that is effective 
for networks with fixed packet sizes, e.g., ATM networks. 


e Weighted Fair Queuing: Applies a fair queue weighting scheme by allowing different 
sessions to have different service shares for improved data packet flow in networks 
with variable packet sizes, e.g., PTM/IP networks. 


: (Not applicable for ETH interfaces) Enter a weight for prioritizing this queue. Options are 1 - 
: 63. 


Minimum Rate ' (Applicable for PTM and Dynamic WAN interfaces only) Enter the minimum shaping rate for 
packets in QoS queues. Options are 1 - 100000 Kbps. 


‘To specify no minimum rate, enter -1. 


Shaping Rate (Applicable for PTM and Dynamic WAN interfaces only) Enter the shaping rate for packets in 
l QoS queues. Options are 1 - 100000 Kbps. 


To specify no shaping, enter -1. 
Shaping Burst Size ; (Applicable for PTM and Dynamic WAN interfaces only) Enter the shaping burst size to be 
! applied to packets in the defined queue. Options are 1600 bytes or greater. 


: (Applicable for PTM and Dynamic WAN interfaces only) Select the priority for the PTM inter- 
‘ face. Options are Low and High. 


DSL Latency (Not applicable for ETH or Dynamic WAN interfaces) Select the level of DSL latency. Options 
‘are: 
atm, ptm i 
e Path0 (Fast): No error correction and can provide lower latency on error free lines. 
e Path1 (Interleaved): Error checking that provides error free data which increases 
latency. 


‘ Note: If you are not sure which option to select, you can select both. 
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Wlan Queue 


On this page, you can view the WLAN queues defined for your network. 


In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Queue > Wlan Queue. The following page 
appears. 
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QoS -- Wlan Queue Setup 


Usage Note: 

Wireless queues and classifications have no effect if WMM Advertise is 
disabled. The WMM Advertise function is located on the Wireless Basic Setup 
page. 


aware] | mo Ta ve Joas 


were] a | wo [7 | as ems 
LINE NONE 


OoS Classification 


On this page, you can create traffic class rules for classifying the ingress traffic into a priority queue. You can also mark the 
DSCP or Ethernet priority of the packet. 


1. In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Classification and then click Add. The 
following page appears. A maximum of 32 entries can be configured. 
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Add Network Traffic Class Rule 


This screen creates a traffic dass rule to dassify the ingress traffic into a priority queve and optionally 
mark the DSCP or Ethernet priority of the packet. 
Click "Appty/Save’ to save and activate the ruie, 


Traffic Class Name: 
Rule Order: 
Rule Status: 


Specify Classification Criteria (A blank criterion indicates it is not used for dassification,) 


Specify Classification Results (A blank value indicates no operation.) 


Specify Egress interface (Required): 

Specify Egress Queue (Required): | j 

- Packets dassified into a quewe that exit through an interface for which the queve 
Is not specified to exist, will instead egress to the default queue on the interface. 


Mark Differentiated Service Code Point (DSCP): hd | 


Mark 802. tp priority: es 

- Glass non-Man packets egress to a non -vlan interface will be tagged with VID 0 and the dass rule 
p-bits. 

» Glass Vian packets egress to a non van interface wil have the packet p-bits remarked by the dass 
rule p-bits. No additional vian tag is added. 

- Gass non-Man packets egress to a Vian interface wil be tagged with the interface VIO and the dass 
rule p-blts. 

+ Gass van packets egress to a vlan interface will be additionally tagged with the packet VID, and the 
Gass rule p-bits. 


Set Rate Limit: [Kbits/s] 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Traffic Class Name : Enter a descriptive name for this rule. This is a free-form text field. 


Rule Order i Select whether this rule is processed last in the list of classification rules. The only 
option is Last. 


Rule Status ‘Select whether this rule is active or inactive. Options are Disable and Enable.The 
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Field Name Description 


; default is Enable. 


‘Select an interface for incoming data. Options are LAN, WAN, Local and any interface 
already configured for your gateway. 


i Select the Ethernet interface type for this classification. Options are IP, ARP, IPV6, 
PPPoE_DISC, pPPoE_SES, 8865, 8866, and 80210. 


i (For Ether Type of 8021Q only) This value is inserted into the Ethernet frame and 
: used to differentiate traffic. Lower values assign higher priorities. Options are: 1 - 7. 


Source MAC Address ' (Not applicable for Ether Type of 8021Q) Enter the source MAC Address and Source 
Source MAC Mask l MAC Mask for this classification. 


Destination MAC Address l (Not applicable for Ether Type of 8021Q) Enter the destination MAC Address and des- 
Destination MAC Mask : tination MAC Mask for this classification. 


(Not applicable for Ether Type of 8021Q) (Optional) Enter the source IP address and 
: subnet mask for this classification, or select a DHCP option from the drop-down list and 
‘enter the address and mask for that server. 


: (Optional) (Not applicable for Ether Type of 8021Q) Enter the destination IP address 
and subnet mask for this classification. 


Differentiated Service l (Optional) (Not applicable for Ether Type of 8021Q) Select the desired DSCP code for 
Code Point (DSCP) Check : marking incoming data. 


: (Optional) (Not applicable for Ether Type of 8021Q) Enter the Protocol specified for 
; this classification. 


Specify Class Queue l (Not applicable for Ether Type of 8021Q) Select from the available queues. 


: Note: Make sure to select a queue that is configured for the interface that you selec- 
‘ted. If you select a queue that is not configured for the selected interface, any packets 
classified into that queue are processed by the default queue for the interface. 


Mark Applied Dif- ; Select the desired DSCP code for marking classification results. 
ferentiated Service Code : 
Point : 
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Field Name Description 


802.1P priority : This value is inserted into the Ethernet frame and used to differentiate traffic. Lower 
: values assign higher priorities. Options are: 1 - 7. 


Set Rate Limit l Enter the data traffic rate limit (in Kbps) applied for this classification. 
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QoS Port Shaping 
QoS Port Shaping facilitates setting a fixed rate (Kbps) for each of the Ethernet ports. 


1. In the left navigation bar, click Advanced Setup > Quality Of Service > QoS Port Shaping. The following page 
appears. 
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QoS -- Port Shaping Setup 


QoS Port Shaping supports traffic rate Uniting on the Ethernet interfaces. 
If "Egress Shaping Rate" is set to *-1", shaping wil be disabled and “Egress Burst Size” will be ignored. 
“ingress Policing Rate” is set to *-1", policing wil be disabled. 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Interface i Each entry in this column represents one of the Ethernet LAN ports on the gateway. 


; Each entry in this column identifies the function for which each physical port is con- 
: figured on the gateway. 


Enter the data rate for packets on the specified Interface. Options are: 1 - 1,000,000 


; Kbps. The default is -1 (no shaping). 


Burst Size (bytes) ; Enter the burst size to be applied to packets in the defined queue. Options are 1600 
: bytes or greater. 


' If you enter a value of -1 (disabled) in the Shaping Rate field, the value in this field is 
‘ ignored. 


Egress Shaping Rate ‘Enter the data rate for packets on the specified Interface. Options are: 1 - 1,000,000 
(Kbps) ‘ Kbps. The default is -1 (no shaping). 
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Field Name Description 


Egress Burst Size (bytes: Enter the burst size to be applied to packets in the defined queue. Options are 1600 
l bytes or greater. The default is 0 (no size limit). 


; If you enter a value of -1 (disabled) in the Egress Shaping Rate field, the value in this 
: field is ignored. 


Ingress Policing Rate ‘Enter data rate for policing incoming packets in the defined queue. The default is -1 (no 
(Kbps) : policing). 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL. ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


Routing 


In this section, you can configure default gateways, static routing, policy routing and RIP settings. 


Default Gateway 


On this page, you can configure the default gateway interface list to establish access priority, that is, interfaces are 
accessed in the order listed in the Selected Default Gateway Interfaces column. 


Note: You must configure the IPv6 interface before attempting to assign it as the default gateway interface. 


1. In the left navigation bar, select Advanced Setup > Routing. The following page appears. 
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Routing - Default Gateway 


Default gateway interface tist can have mattiple WAN interfaces served as system default gateways but 
only one wil be used according to the priority with the first being the highest and the last one the 
lowest priority if the WAN interface is connected. Priority order can be changed by removing all and 
adding them back in again. 


Selected Default 
Gateway Interfaces 


pepo 


Select a preferred wan interface as the system default IPvó gateway. 


Selected WAN Interface [NO CONFIGURED INTERFACE ~ 


2. Select the interfaces that you want used as default gateway interfaces. Click the arrows to move your selection 
between the columns. Move the highest priority interface first, followed by the next highest priority interface, and 
soon. 

3. (Optional) In the Selected WAN Interface field, select an IPv6 interface. The default is NO CONFIGURED 
INTERFACE. 


4. Click Apply/Save to commit your changes. 
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Static Route 


On this page, you can configure static routes for your network. A static route is a manually configured, fixed route for IP 
data. You can enter a maximum of 32 entries. 


1. In the left navigation bar, click Advanced Setup > Routing > Static Route and then click Add. The following page 
appears. 
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Routing -- Static Route Add 


Enter the destination network address, subnet mask, gateway AND/OR available WAN interface 
then dick “Apply/Save" to add the entry to the routing table. 


IP Version: 

Destination IP address/prefix length: 
Interface: 

Gateway © Address: 


(optional: metric number should be greater than or equal to zero) 
Metric: | 


| z 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


IP Version ‘Select the IP version associated with the static route you wish to create. Options are: IPv4 
‘and IPv6. 


Destination IP address/ : 
prefix length 


‘ (Optional) Establishes traffic priority/weighting. Must be equal to or greater than zero (> 
0). 


Policy Routing 


Policy routing makes somewhat automated routing choices based on policies defined by a network administrator. For 
example, a network administrator might want to deviate from standard routing based on destination markers in the packet 
and, instead, forward a packet based on the source address. 


On this page, you can configure similar policies. 
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1. In the left navigation bar, click Advanced Setup > Routing > Policy Routing and then click Add. The following page 
appears. 


SMART/RG er 


forward thinking 


Policy Routing Settup 

Enter the policy name, policies, and WAN interface then dick “Apply/Save” to add the entry 
to the poticy routing table. 

Note: Default gateway must be configured for PoE connection that doesn't rely on DHCP. 


Poticy Name: 


Physical LAN Port: | 


Source P1 


Use Interface, ipoe_0_0_35/atm0,2 vj 
Default Gateway P: 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Policy Name ‘Enter a descriptive name for this entry to the policy routing table. 


Default Gateway IP ‘Enter the IP address of the default gateway. 


RIP (Routing Information Protocol) 


RIP is a type of distance-vector routing protocol, which leverages hop count as a metric for routing. RIP puts a limit on the 
number of hops (maximum of 15) allowed in order to prevent routing loops. This can sometimes limit the size of networks 
where RIP can be successfully employed. 


Note: This feature applies only to IPoE configurations. 


On this page, you can configure the RIP settings. 
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1. In the left navigation bar, click Advanced Setup > Routing > RIP, and then click Add. The following page appears. 
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Routing -- RIP Configuration 
NOTE: If selected interface has NAT enabled, only Passive mode is allowed. 


To activate RIP for the WAN interface, select the desired RIP version and operation and 
place a check in the Enabled checkbox. To stop RIP on the WAN interface, uncheck the 
‘Enabled’ checkbox. Click the “Apply/Save’ button to star/stop RIP and save the 


2. Fill in the fields, using the information in the table below. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Interface l Displays a list of available WAN interfaces. Complete the line item(s) associated with the inter- 
; face where you wish to employ RIP. 


: Select the version of Routing Interface Protocol you desire. Reference RFC 1058 and RFC 1453 for 
: detailed information on RIP versions. Options are: 1, 2, and Both. 


l Select the operation mode. Options are: 


e Active: This mode listens and advertises routes. 
e Passive: This mode listens only. It does not advertise routes. 


Sti Sees cases ee see TE EEU EE ME EE EE DERE TIETE EE ET EE se eames 


l Select to employ RIP on the displayed interface. 


DNS 


In this section, you can configure a DNS server, dynamic DNS and static DNS. 
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DNS Server 
On this page, you can input the Domain Name Server (DNS) information supplied by your service provider. 


1. In the left navigation bar, click Advanced Setup > DNS. The following page appears. 
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ONS Server Configuration 


Select DNS Server interface from available WAN interfaces OR enter static DNS server IP 
addresses for the system. in ATM mode, if only a single PVC with IPoA or static IPoE protocol 
is configured, Static DNS server IP addresses must be entered. 

ONS Server Interfaces can have multiple WAN interfaces served as system dns servers but 
onty one will be used according to the priority with the first being the higest and the last one 
the lowest priority if the WAN interface is connected. Priority order can be changed by 
removing all and adding them back in again. 


© Select ONS Server Interface from available WAN interfaces: 
Selected DNS Server Available WAN 
interfaces interfaces 


pppo | [atmo.2 
ppp24 | eth3.2 
pppl.t 


O Uie the following Static DNS IP address: 
Primary ONS server: 
Secondary DNS server: 


Select the configured WAN interface for the IPvé ONS server information OR enter the static 
IPyé DNS server Addresses. 

Note that selecting a WAN interface for the Pvó DNS server will enable the DHCP¥6 Cent on 
that interface. 


@ Obtain IPvé DNS info from a WAN Interface: 
WAN Interface selected: | pppoe_0_0_35/ppp2.4 ~ 
O Use the following Static IPvé DNS address: 


Primary IPvé ONS server: 
Secondary Pvt DNS server: 


2. (Optional) Select DNS Server interfaces by moving them from left to right or right to left by clicking the arrows. 
The options for obtaining the DNS information from a WAN interface are selected by default. 


3. Touse a static DNS IP address, click Use the following Static DNS IP address and enter the primary DNS IP address. 
If applicable, enter a secondary DNS IP address. 
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4. (Optional) In the WAN Interface selected field, select a different WAN interface. 
The Obtain IPv6 DNS info from a WAN interface option is selected by default. 


5. To use a static DNS IPv6 address, click Use the following Static IPv6 DNS address and enter the primary DNS IP 
address. If applicable, enter a secondary DNS IP address. 


6. Click Apply/Save to commit changes. 


Dynamic DNS 


Dynamic DNS (DDNS) automatically updates aname server in the DNS with the active DNS configuration of its configured host- 
names, addresses or other data. Often this update occurs in real time. On this page, you can configure the settings for this 
feature. 


1. In the left navigation bar, click Advanced Setup > DNS > Dynamic DNS and then click Add. The following page 
appears. 
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Add Dynamic ONS 


This page allows you to add a Dynamic DNS address from DynDNS.org, TZO, or no-lp.com. 


D-DNS provider [Dynbws.ceg ~| 


Hostname 9 i 
interface [ipoe 0.0 3s/amo.2 ~| 


DynDNS Settings 


Usemame 
Password 


2. Modify the settings, using the information provided in the following table. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


D-DNS provider : Select a dynamic Domain Name Server provider. 


ER AE EEEE DEE, AE ER ERA AT pe EE IESER ESTAA IE AT AA ER AO EE Se 


Hostname : Enter the hostname of the dynamic DNS server. 


TEE IT EE Seek, EE EE EL AR OE N LR ELE AI EP eh ees See EE N OT 


Interface ; Select the gateway WAN interface whose traffic will be pointed at the specified Dynamic DNS 
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Field Name Description 


‘ provider. 


Username ‘Enter the username for the dynamic DNS server . 


ee EE cre EER EN DI EE TEE EE TOL IE AE eee 


Password i Enter the password for the dynamic DNS server. 


Static DNS 


The Static DNS service allows you to resolve DNS queries on the Broadband Router by adding a static host name to the IP 
Address mappings. On this page, you can configure up to 10 static DNS entries. 


1. In the left navigation bar, click Advanced Setup > DNS > Static DNS and then click Add. The following page appears. 
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Static ONS Entry 


Enter the Host Name and IP address then dick “Apply/Save" . 


Host Name: 
P Address: 


2. Modify the settings, using the information provided in the following table. 
3. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Hostname ; Enter the hostname of the client computer. 


Interface : Enter the IP address of the DNS server client uses to assist in resolving domain names. 
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DSL 


On this page, you can configure settings for the DSL interface. 


Caution: Altering these settings unnecessarily can result in the gateway being unable to attain DSL synchronization. 


1. In the left navigation bar, click Advanced Setup -> DSL. The following page appears. 
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DSL Settings 


Select the modulation below. Select the profile below. 


G.Dmt Enabled Ba Enabled 

G.lite Enabled Bb Enabled 

71.413 Enabled & Enabled 

ADSL2 Enabled 8d Enabled 

Annex Enabled ©) 12a Enabled 

ADSL2+ Enabled 12b Enabled 
C Annex Enabled © 17a Enabled 
VDSL2 Enabled 


Select the phone line pair below. 
@ inner pair 


O Outer pair 


Capability 
Bitswap Enable 
C SRA Enable 
C PhyR Enable 
C ADSL PTM Mode Enable 
CO Stinger® Mode Enable 


Inventory Management 
C Use board serial for EOC Serial Number 


| agree | 
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2. Modify the settings as needed. 
3. Click Apply/Save to commit your changes. 


The modulation settings are described in the table below. 


Modulation Data Transmission Rate Max Downstream Max Upstream 
(Mbps) (Mbps) 


: ITU-T G.992.1 standard. 


bee eee eee ee ee ee EER ER TERT ET OER TEER ER EKT RT ee eee ee ee ee eee ee eee been eee eee eee eee eee eee bee eee eee eee eee eee 


ITU-T G.991.2 standard. ' 4 l 0.5 


errer ER ETER ETER TEE EER ET OT EER ER TT EER EER EER been eee EET TREER bee ee eee eee ee ee eee 


| ANSI T1.413 Issue 2 standard. 8 : 1.0 


bee eee ee ee ee ee ee ee ER TERT ET ER TEE EER ET OT ee ee ee ee ee eee EER beeen eee eee eee eee eee ee beeen ee eee eee ee eee 


: ITU-T G.992.3 standard. 12 1.0 


: Annex L of ITU-T G.992.3 standard which supports longer loops 
, but with reduced transmission rates. 


: ITU-T G.992.5 standard. 


bec cc EE EE EER EE EE GE OE EE GE EG OE GE EE OE EE EE ee eee ee eee EER EE EE EE GELEES EER EE ER 


: Annex L of ITU-T G.992.5 standard which supports extended 
upstream bandwidth. 


Parameter 


Max DS Tx Power (dBm) 417.5 1420.5! 411.5 


MR ET DEE OE EE EP bie E MEDE ESE DM HOE DE DIE oe De Ee a eee DR DR ee Ee 


Max US Tx Power (dBm) 


AR TE AE eyes erate a E viata Saas OE et Sey eae EE ee ee iy 


Min bidirectional net data rate : : 68Mbps : 100Mbps 
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Other Settings 


Field Name Description 


Inner ‘The RJ11 connector has four contacts. The center pair of pins is DSL1. The outer pins are the con- 
Pair /Outer Pair ; tacts for DSL2. Select which pair should be used. 


Bitswap Enable: Enables adaptive handshaking functionality. 

SRA Enable: Enables Seamless Rate Adaptation. 

PhyR Enable: Enables Physical Layer Retransmission. 

ADSL PTM Mode Enable: Enables Asymmetric Digital Subscriber Line in Packet Transfer 
Mode. 

Stinger® Mode Enable: Enables communication with Stinger type equipment. 


Capability 


Inventory Man- Select whether to use the gateway serial number as the EOC serial number in your inventory man- 
agement : agement database. 


UPnP 


On this page, you can enable UPnP when 3rd party devices on your LAN support this Universal Plug and Play standard. Com- 
mon client devices include gaming consoles, IP cameras, printers and others. This feature is enabled by default. 


1. In the left navigation bar, select Advanced Setup > UPnP. The following page appears. 
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UPnP Configuration 
NOTE: UPnP is activated only when there is a live WAN service with NAT enabled. 


EF Enable UPnP 


2. To disable this option, click Enable UPnP to clear the box. 
3. Click Apply/Save to commit your changes. 
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DNS Proxy 


On this page, you can configure the DNS proxy settings. A DNS proxy improves domain look-up performance for clients by cre- 
ating a historical cache of look-ups. 


1. In the left navigation bar, click Advanced Setup > DNS Proxy. The following page appears. 


SMART/RG' 


| forward thinking 


DNS Proxy Configuration 


EA Enable ONS Proxy 


Host name of the Broadband Router: | ear 


Domain name of the LAN network: — 


2. If not already selected, click Enable DNS Proxy. 
The Host name and Domain Name fields appear. 


3. Enter the host name of the broadband router and the domain name of the LAN network. 
4. Click Apply/Save to commit your changes. 


Storage Service 


In this section, you can view information about the storage devices connected to the gateway and manage the user accounts 
that can access them. 


Storage Device Info 


On this page, you can view information about storage devices that connect to the gateway and manage the related user 
accounts. 


In the left navigation menu, click Advanced Setup > Storage Service. The following page appears, showing information 
about the connected storage device. 
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Storage Service 
The Storage serve afows you to use Storage devices with modem to be more east 
axcessed 


User Accounts 
On this page, you can manage user accounts for the storage devices. 


1. In the left navigation menu, click Advanced Setup > Storage Service > User Accounts. The following page appears. 
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Storage UserAccount Configuration 
Choose Add, or Remove to configure User Accounts. 
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2. Toadd anew account: 
a. Click Add. the following page appears. 
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in the boxes below, enter the user name, password and volume name on which 
the home directory is to be created. 


Username: sr 


mad 
Password: sess. 
Confirm Password: 
volumeName: | 


b. Enter a user name and enter the password twice. Spaces are not allowed in the password. 
Note: The volumeName field is not currently used. 
c. Click Apply/Save to save your settings. You are returned to the User Accounts page. 
3. To remove a user account, click the Remove checkbox next to the account entry and then click the Remove button. 
The list refreshes to show your changes were applied. 


Interface Grouping 


You can create an interface group to map local interfaces to WAN interfaces. A typical application for this feature is assign- 
ing IPTV STBs to a WAN interface. 


1. In the left navigation bar, click Advanced Setup > Interface Grouping and then click Add (below the table). The fol- 
lowing page appears. 
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IMPORTANT If a vendor ID is configured for a specific client device, please 
REBOOT the client device attached to the modem to allow it to obtain an 
appropriate IP address. 


Group Name: | 


Shared WAN Interface: C 


Grouped WAN Interfaces Available WAN Interfaces 


|ipoe_0_0_35/atm0.2 A] 
|br_0_0_35.7/atm0.3 
|ipoe_eth3/eth3.1 

7 pppoe 0.0. 35.5/pppl.1 


Automatically Add Clients 
With the following DHCP 
Vendor IDs 


2. Tocreate anew interface group, enter a unique Group Name, then proceed with either step 3 (dynamic) or step 4 
(static) below. 

3. If this new grouped interface is to share the WAN interface, click Shared WAN Interface. Not selecting this option 
this will cause the WAN interface you select to be removed from any other interface groups. 
Important: If a vendor ID is configured for a specific client device, make sure to reboot the client device attached to 
the gateway to allow it to obtain an appropriate IP address. 
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4. Map the ports for the WAN or LAN interface: 
a. Select an interface from the applicable Available Interface list. 


b. Add it to the Grouped Interface list by clicking the arrow to create the required mapping of the ports. Hold 
down the Shift key to select multiple interfaces. 
Note: Depending on the WAN interface configuration, these clients may obtain public IP addresses. 


5. To automatically add LAN clients (such as set-top boxes) to a WAN Interface in the new group, enter the DHCP 
vendor ID string. You can add up to 16 vendor IDs. 
When you configure a DHCP vendor ID string, any DHCP client request that includes this vendor ID is denied an IP 
address from the local DHCP server (DHCP option 60). 


6. Click Apply/Save. Your changes take effect immediately. 


7. Toremove a grouping, on the Interface Grouping list page, select the grouping and click Remove. You can only 
remove groupings that you create. 


IP Tunnel 


IP Tunneling is typically used as a means to establish a path between two independent networks. Your SmartRG gateway 
supports connecting islands of IPv6 networks across the IPv4 internet or IPv4 in IPv6 as well. 


On this page, you can configure IP tunnel settings. 


Note: For IPvéinIPv4, only 6rd configuration is supported. For IPv4inIPv6, only DS-Lite configuration is supported. 


IPvéinIPv4 
On this page, you can configure the IPv6inIP4 settings. 


1. In the left navigation bar, click Advanced Setup > IP Tunnel > IPv6inIPv4 and then click Add. The following page 
appears. 
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IP Tunneling -- 6in4 Tunnel Configuration 


Currently, only 6rd configuration is supported. 


Tunnel Name 

Mechanism: 

Associated WAN Interface: 
Associated LAN Interface: 
@ Manual © Automatic 


IPv4 Mask Length: 
6rd Prefix with Prefix Length: 
Border Relay IPv4 Address: 
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2. Enter adescriptive Tunnel Name. 
Skip the Mechanism field. Currently, only the 6RD mechanism is supported. 
3. Select the WAN and LAN interfaces associated with the tunnel you wish to establish. 


Do one of the following: 
a. Toconfigure the LAN interface settings manually, enter values located below the Manual button. 


e IPv4 Mask Length: Options are 0 - 32. 
e 6rd Prefix with Prefix Length: prefix/length, such as: 2002::/64. 


e Border Relay IPv4 Address: Enter the IP address for the IPv6 relay server. 
b. Toconfigure these settings automatically, select Automatic. The fields below the buttons are hidden. 
5. Click Apply/Save to commit your changes. 


IPv4inIPv6 
On this page, you can configure the IPv4inIP6 settings. 


1. In the left navigation bar, click Advanced Setup > IP Tunnel > IPv6inIPv4 and then click Add. The following page 
appears. 
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IP Tunneling -- 4in6 Tunnel Configuration 


Currently, only DS-Lite configuration is supported. 


Tunnel Name 

Mechanism: 

Associated WAN Interface: 
Associated LAN Interface: 
@ Manual O Automatic 


AFTR: 


Note: Currently, only the DS-Lite Mechanism is supported. Consult RFC6333 for further information regarding DS- 
Lite. 


2. Enter a descriptive Tunnel Name. 

Select the LAN and WAN interfaces associated with the tunnel you wish to establish. 
Under Associated LAN Interface, enter the appropriate value for AFTR (Address Family Transition Router). To con- 
figure this setting automatically, select Automatic. The AFTR field is hidden. 
5. Click Apply/Save to commit your changes. 


Aw 
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IPSec 


Internet Protocol Security is a protocol for securing communications by packet level encryption and authentication. 


On this page, you can enable and remove IPSec connections, or edit existing connections. 


1. In the left navigation bar, click Advanced Setup > IP Sec and then click Add New Connection. The following page 
appears. 
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IPSec Settings 
IPSec Connection Name 
IP Version: 


Tunnel Mode 


Local Gateway Interface: 


Remote IPSec Gateway Address 


Tunnel access from local IP 
addresses 


IP Address for VPN 
Mask or Prefix Length 


Tunnel access from remote IP 
addresses 


IP Address for VPN 
Mask or Prefix Length 


Key Exchange Method 
Authentication Method 
Pre-Shared Key 

Perfect Forward Secrecy 


Advanced IKE Settings 


2. Complete the fields, using the information provided in the following table. 


3. If desired, click Advanced IKE Settings to select Phase 1 and Phase 2 specific parameters. For detailed information 
about these settings, see "Advanced IKE Settings". 


4. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 
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Field Name Description 


IPSec Connection Name : Enter a descriptive name for this connection 


IP Version : Select the IP version associated with your infrastructure. Options are IPv4 and 


Tunnel Mode : Select the encapsulation method to be used. Options are: 


e AH: Use this mode to encapsulate a packet with AH and IP headers. For 
authentication, the entire packet is signed. 

e ESP: Use this mode to encapsulate a packet with ESP and IP headers. An 
ESP trailer is added to the packet for authentication and integrity. 


Select the WAN connection to be associated with this tunnel. 


: Enter the WAN IP for this tunnel. 


Tunnel Access From Local IP : Select IP information for site A and B. Options are: 


Addresses e Subnet: Allows access to the entire LAN. 


e Single Address: For single host, select this option. 


‘Enter the subnet mask or prefix length for IP address entered for local access. 
: The default is 255.255.255.0. 


Tunnel Access From Remote IP Select IP information for site A and B. Options are: 


Addresses e Subnet: Allows access to the entire LAN. 


e Single Address: Allows access to a single host. 


‘Enter the subnet mask or prefix length for IP address entered for remote access. 
: The default is 255.255.255.0. 


Key Exchange Method : Select the key-exchange method to be used for IPSec. Options are: 


e Auto(IKE): This method uses the negotiated key-exchange method for 
IPSec. This is the default and recommended for best results. 


e Manual: This method requires that you configure the details. 


Authentication Method ; Select the method by which the remote end will authenticate. 


e Pre-Shared Key: A key is distributed to authorized users for logging into 
the system. Enter the key in the Pre-Shared Key field. 

e Certificate (X.509): A certificate is used for authentication. Select the 
certificate file in the Certificates field that appears. 


Perfect Forward Secrecy : Select whether a session key is derived from a set of long-term keys is com- 
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Field Name Description 


: promised if one of the long-term keys in the set is compromised. 


e Enable: Prevents long-term key from being compromised. 
e Disable: Permits long-term keys to be compromised. 


‘Enter the hex value for the service provider interface (SPI). The default is 101. 


Advanced IKE Settings 
You can configure advanced IKE settings if desired. 


1. On the IPSec Settings page, click Show Advanced Settings to display the Phase 1 and Phase 2 fields. 
2. Fill in the fields, using the information in the table below. 


Field Name Description 


: Select a mode. Options are Main and Aggressive. 


Encryption Algorithm : Select the encryption algorithm. Options are DES, 3DES , AES -128, AES-192, and 
' AES-256. 


Integrity Algorithm l Select the integrity algorithm. Options are MD5 and SHA1. 


AE AE EEE EE E RE HOE HEEL TAPE EET E EE RE EER HEL ELE APE TE N Sr Gece, 


Select Diffie-Hellman Group: Select the D-H group. Options are 768bit - 8192bit. The default is 1024bit. 
for Key Exchange 


Key Life Time Enter the number of seconds that a key is valid. The default is 3600 seconds. 


3. Click Apply/Save to commit your changes. 
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Certificate 


In this section, you can configure certificates for the gateway. You can use Local and Trusted CA certificates on this gate- 
way. 
Local 


Local certificates are used to identify the gateway to other users. On this page, you can create a new certificate request 
and have it signed by acertificate authority, or you can import an existing certificate. 


For additional info regarding Public Key Infrastructure (PKI), refer to ITU-T X.509. 


1. In the left navigation bar, click Advanced Setup > Certificate > Local and then click Create Certificate Request. 
The following page appears. 
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Create new certificate reguest 


To generate a certificate signing request you need to indude Common Name, 
Organization Name, State/Province Name, and the Z-letter Country Code for 
the certificate. 


Certificate Name: 
Common Name: 


Organization Name: 
State/Province Name: 
Country/Region Name: 


2. Complete the fields, using the information in the table below. For more information about certificates, refer to the 
ITU X.509 standard. 
3. Click Apply to complete the request. 


Field Name Description 


Certificate Name ; Enter a description of the intended use of the certificate. 


Common Name i Enter the IP address (in dotted decimal notation), domain name or email address in the field 
l provided. The domain name or email address is for identification purposes and is a free-form 
text field. 
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Field Name Description 


Organization Name ; A free form text field. Typically, this is the name of the company creating the request. 


PPE EE A ET TEE AAE AL KAR AE MOE EO TPE EAT EEO TIER E OES DOE S 


Country/Region : Select the country or region in which this certificate will be employed. 


4. Toimport a certificate and the corresponding private key, on the Advanced Setup > Local Certificates page, click 
Import Certificate. The following page appears. 
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import certificate 


Enter certificate name, paste certificate content and private key 


5. In the Certificate Name field, type "cpecert". 
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6. Paste the Certificate details between the BEGIN and END markers. 
7. Paste the Private Key information between the BEGIN and END markers. 
8. Click Apply to implement this certificate. 


Trusted CA 


On this page you import and store up to four trusted certificates. Trusted Certificates are used to identity other gateways 
to your gateway as a trusted source. 


1. In the left navigation bar, click Advanced Setup > Certificate > Trusted CA and then click Import Certificate. The 
following page appears. 
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Import CA certificate 


Enter certificate name and paste certificate content. 


Certificate r 
Name: 


2. In the Certificate Name field, type "acscert" 
3. Paste the Certificate details between the BEGIN and END markers. 
4. Click Apply to commit this certificate. 


After you add one certificate, a Remove button appears on the Trusted CA landing page. Click this button to remove the 
current certificate and replace it with anew one. 
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Multicast 


Multicast methodology is used for applications shipping information simultaneously to multiple destinations. The most com- 
mon scenario is Internet television and other streaming media. In IP Multicast, the implementation occurs at the IP routing 
level, where routers create the most efficient distribution paths for packets sent to a destination. 


On this page, you can configure the multicast settings. 
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1. In the left navigation bar, select Advanced Setup > Multicast. The following page appears. 
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[Disate “lower valve, Bigher pelority 
Ee 


Enter IGMP protocd configuration fields if you want modify default vases shown below. 


Default Version: 3 

Query interva: us 

Query Response Interval: ” 
LI 


Last Member Query Interval: Í 
Robustness Value: g 
Maximum Multicast Groups: hid 
Maximum Multicast Data Sources = 
(foe IGMP}: 

Maximum Multicast Geoup 
Members: 

Fast Leave Enable: 


P mene | sasana O 
EIE INN 
ENE INN 


Enter MLO protocol (vt Multicast) configuration fletds if you want modify default valwes shown below. 


Default Version: 

Query interva: 

Query Response interval: 

Last Member Query interval: 
Robuttness Value: 

Madmum Multicast Geoups: 
Maximum Multicast Data Sources /- 
(fee mid ` 
Maximum Multicast Group 
Members: 

Fast Leave Enatie: 


2. Modify the settings as needed, using the information in the table below. The same fields are provided for both IGMP 
and MLD configuration. 


3. Toadd addresses to the exception lists, in the Group Exception List tables, enter any additional address and mask 
information and then click Add. 
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Note: For the IGMP list, the Group Address must be between 244.x.x.x and 239.x.x.x. For the MLD table, the Group 
Address must be a valid IPv6 address. 


4. Toremove addresses from the exception lists, click the checkbox in the Remove column next to the address(es) and 
then click Remove Checked Entries. The list refreshes immediately. 
5. Click Apply/Save to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Multicast Precedence : Select whether IGMP packets are given priority handling and at what level. Options are: 


e 1-4: IGMP packets are prioritized using the multicast precedence value. The 
lower the multicast precedence value, the higher that IGMP packets will be 
placed in the queue. 


e Disable: IGMP packets are not prioritized. This is the default. 


Multicast Strict Group- ‘Select whether strict grouping is applied to IGMP packets. Options are Enable and Dis- 
ing Enforcement 


Default Version ; Select the supported IGMP version. Options are 1 - 3. 


Query Interval ‘Enter the interval (in seconds) at which the multicast router sends a query messages to 
: hosts. the default is 125. 


‘ Note: If you enter a number below 128, the value is used directly. If you enter a number 
128, it is interpreted as an exponent and mantissa. 


Query Response Inter- : Upon receiving a query packet, a host begins counting down seconds, from a random num- 
val l ber. When the timer expires, the host sends its report. The default is 10 seconds. 


Enter the maximum number of seconds that a host can pick to count down from. The 
‘value must be greater than the Query Interval. If using IGMP v1, this value is fixed at 10 
seconds. 


Last Member Query : Enter the maximum response time (in seconds) within which the host must respond to the 
Interval l Out of Sequence query from the router. The default is 10 seconds. 


‘IGMP uses this value when the router receives an IGMPv2 Leave report indicating at least 
‘ one host wants to leave the group. Upon receiving the Leave report, the router verifies 
; whether the interface is configured for IGMP Immediate Leave. If not, the router sends 
; the out-of-sequence query. 
Robustness Value l Enter the value representing the complexity of the query. The greater the value, the 
l more robust the query. Options are 2 - 7. The default is 2. 


Maximum Multicast : Enter the maximum number of groups allowed. The default is 25. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL. ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


Field Name Description 


Maximum Multicast 
Data Sources (for 
IGMPv3) 


Maximum Multicast : Enter the maximum number of multicast groups that can be joined on a port or group of 
Group Members l ports. The default is 25. 


Fast Leave Enable ) Select whether the IGMP proxy removes group members immediately without sending a 
: query. Options are: 
e Enabled: Group members are removed immediately. This is the default. 


e Disabled: Group members are removed after a query is sent and a response 
received. 
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In this section, you can configure the wireless interface settings for your gateway, including basic and advanced settings, 
MAC filtering, and wireless bridging. 


Basic 


On this page, you can configure basic features of the WiFi LAN interface. You can enable or disable the WiFi LAN interface, 
hide the network from active scans, set the WiFi network name (also known as SSID) and restrict the channel set based on 
country requirements. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL. ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


1. In the left navigation bar, click Wireless > Basic. The following page appears. 
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Wireless -- Basic 


This page allows you to configure basic features of the wireless LAN interface. You 
can enable or disable the wireless LAN interface, hide the network from active scans, 
set the wireless network name (also known as SSID) and restrict the channel set 
based on country requirements. 

Click "Apply/Save" to configure the basic wireless options. 


Enable WIFI Button 

Enable Wireless 

Hide Access Point 

Gients Isolation 

Disable WMM Advertise 

Enable Wireless Multicast Forwarding (WMF) 
SSD: [mnan 
BSSID:  00:23:6A:D8:9D:88 


Country: | UNITED STATES {x 


2. Modify the settings as desired, using the information provided in the table below. 


3. (Optional) Define up to three virtual access points for guest use using the information from the Wireless - Guest/Vir- 
tual Access Points section of the table below. 
4. Click Apply/Save to commit your settings. 


The fields on this page are explained in the following table. 
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Field Name Description 


Enable Wireless : Select to enable the gateway's WiFi radio. 


Enable Wireless Hot-: Select whether to enable wireless Hotspot 2.0. (WPA2 is required.) Hotspot 2.0 enables a 
‘mobile device to automatically discover Wi-Fi access points that have a roaming arrangement 
: with the user's home network and then connect securely. Options are Enabled and Dis- 
: abled. 


EN AEE PPE EEE EA IT E T O EA KA EA OIE E E EAE EE EE ane O S os 


‘Select to hide the access point SSID from end users and passive scanning. 


Clients Isolation : Select to prevent LAN client devices from communicating with one another on the wireless 
‘ network. 


Disable WMM Advert- Select to stop the wireless from advertising Wireless Multimedia (WMM) functionality. Select- 
i ; ing this option can improve transmission performance for voice and video data. 


Enable Wireless : Select to disable Wireless Multicast Forwarding (WMF). Multicast traffic is forwarded across 
Multicast For- i wireless clients. Selecting this option can improve the quality of video services such as IPTV. 


; Enter the WiFi SSID. For security purposes, this identifier should be unique for your system. 


: Displays the Basic Service Set Identifier (BSSID), the MAC address, assigned to the wireless 
' router. 


: Select the country in which the gateway is deployed. The wireless channel will adjust to 
! the frequency provision for the selected country. 


Max Clients ; Enter the maximum number of clients that can access the route wirelessly. Options are 1 
; through to the value set in the Global Max Clients field on the Wireless > Advanced page. 


; Note: Before you can change this setting, you must change the Global Max Clients setting. 


Enabled ; Select to enable a virtual wireless access point for guest access. 


A TE E AA EL EE EE EE AE AE ETTE AEE TEA 


Enter the wireless SSID for guests to use. 


ME AE EE EA RE EE EE EE DE EER EE LE DE EE VERE TR SPEEN AE 


Hidden Select to hide the SSID from being broadcast publicly. 


TEE EIER ee EE EET TE ER AO VIE IERE OR LE EL EI ELE EA NE OE 


Isolate Clients ! Select to prevent client PCs from communicating with one another. 


Enable WMM Advert-: Select to stop the wireless from advertising Wireless Multimedia (WMM) functionality. 
ise 
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Field Name Description 


Enable WMF Select to enable Wireless Multicast Forwarding (WMF). 


Max Clients ‘Enter the maximum number of clients that can connect to this access point. 


REEL EO EE EA EE DT AE EE EL EP ER EI AT a 


Displays the Basic Service Set Identifier or "N/A". 


Security 


On this page, you can configure network security settings of a wireless LAN interface, either by using the WiFi Protected 
Setup (WPS) method or by setting the network authentication mode. For WiFi Protected Setup, the following methods are 
supported: 
e PIN entry, a mandatory method of setup for all WPS-certified devices. Options are: 
e Enter STA PIN: You must enter the (input) station PIN from the client. 
e Use AP PIN: AP generates the device PIN. 
e PBC (Push button configuration): Uses a simulated push button in the software. (This is an optional method on wire- 
less clients.) 
To use the PIN method, you need a Registrar (access point/wireless gateway) to initiate the registration between a new 
device and an active access point/wireless gateway. 


Note: The PBC method may also need a Registrar when the PIN is all zeros. 


Seven types of network authentication modes are supported: Open, Shared, 802.1X, WPA2, WPA2-PSK, Mixed WPA2/WPA, 
and Mixed WPA2/WPA-PSK. 
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1. In the left navigation bar, click Wireless > Security. The following page appears. 
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WPS Setup 
Enable WPS Enabled v 


Add Client (This feature is available only when WPA-PSK(WPS1), WPA2 PSK or 
OPEN mode is configured) 


Ouse STA PIN OUse APPIN | Add Enrotee | 


Set WPS AP Mode [Configured ~] 


Setup AP (Configure all security settings with an external registar) 


Device PIN (wry) Help 


Manual Setup AP 


You can set the network authentication method, selecting data encryption, 
specify whether a network key is required to authenticate to this wireless 
network and specify the encryption strength. 

dick “Apply/Save” when done. 


Select SSID: SmartRG-9d86 v 


Network Authentication: Mixed WPA2/WPA -PSK Y 


Protected Management S 
Frames: Disabled 


WPA passphrase: Gick here to display 
O Use base MAC address as default WPA passphrase 


WPA Group Rekey Interval: [0 |] 
WPA Encryption: [AES y 


WEP Encryption: Disabled 


2. Modify the settings as needed, using the information provided in the field description table below and in the sec- 
tions that explain each authentication method. 


The fields in the WPS Setup section are described in the following table. 
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Field Name Description 


Enable WPS ; Select to enable WiFi Protected Setup. Options are: Enabled and Disabled. The default is Dis- 


Add Client : (Available for WPA-PSK, WPA2-PSK and Open Network Authentication methods) Select the 
' method for generating the WPS PIN. Options are: Enter STA PIN and Use AP PIN. If you select 
‘Enter STA PIN, type the PIN in the field below the radio button. If you select Use AP PIN, the 
‘entry field and the Set Authorized Station MAC field disappear. 


‘To add an enrollee station, click Add Enrollee. 


: Note: If the PIN and Set Authorized Station MAC fields are left blank, the PBC (push-button) 
‘mode is automatically made active. 


Set Authorized : (Available only when Enter STA PIN is selected) Enter the MAC address of the authorized 
Station MAC : (input) station. 
Set WPS AP Mode : Select how security is assigned to clients. 

e Configured: The gateway assigns security settings to clients. This is the default. 

e Unconfigured: An external client assigns security settings to the gateway. 


et oa EI ection. E A EE EE EO LO IE DIL DO MED EE ER N OE RE ODE OD 


Device PIN ; This value is generated by the access point. 


3. In the Manual Setup AP section, select the SSID for the device that you want to configure. 
4. Select the Network Authentication method and then fill in the fields that appear. The default method is Mixed 
WPA2 / WPA-PSK. Detailed instructions are provided for each method in the following sections: 


e "Open and Shared Network Authentication" 
e "802.1X Network Authentication" 


e "WPA2-PSK and Mixed WPA2/WPA-PSK Network Authentication" 
e "WPA2 and Mixed WPA2/WPA Network Authentication" 
5. Click Apply/Save to commit your changes. 
Open and Shared Network Authentication 


The same configuration fields apply for both Shared and Open authentication types except that WEP Encryption is enabled 
by default for the Shared method. 


The following fields appear when you select Open or Shared in the Network Authentication field. 
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Manual Setup AP 


You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and specify the encryption 
strength. 

Click 'Apply/Save' when done. 


Select SSID: SmartRG4A50 ~v 
Network Authentication: Open X 
WEP Encryption: Disabled ~ 


Modify the fields as needed and then click Apply/Save. 


The fields on this page are explained in the following table. 


Field Name Description 


WEP Encryption : Select to enable Wired Equivalent Privacy (WEP) mode. Options are Enabled and Disabled. 
: The default is Disabled for Open authentication and Enabled for Shared authentication. 


(Appears when WEP Encryption is set to Enabled) Select the length of the encryption 
: method. Options are 128-bit and 64-bit. 128-bit is the default and is the more robust option 
‘ for security. 


(Appears when WEP Encryption is set to Enabled) Select which of the four keys is presently 
‘in effect. 


Network Key 1-4 i (Appear when WEP Encryption is set to Enabled) Enter up to four encryption keys using the 
; on-screen instructions to achieve the desired security strength. 


802.1X Network Authentication 


The following fields appear when you select 802.1X in the Network Authentication field. WPS is disabled for this method. 
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Manual Setup AP 


You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and specify the 
encryption strength. 

Click 'Apply/Save' when done. 


Select SSID: SmartRG_5Gb8ef v 


Network Authentication: 802.1X bd 


RADIUS Server IP Address: 0.0.0.0 


RADIUS Port: 1812 

RADIUS Key: 

WEP Encryption: Enabled v 

Encryption Strength: 128-bit v 

Current Network Key: 2S 

Network Key 1: | 1234567890123 | 

Network Key 2: 1234567890123 

Network Key 3: 1234567890123 

Network Key 4: (1234567890123 | 
Enter 13 ASCII characters or 26 hexadecimal digits for 128-bit encryption 
keys 
EL 5 ASCII characters or 10 hexadecimal digits for 64-bit encryption 
keys 


Modify the fields as needed, using the information provided in the table below, and then click Apply/Save. 


The fields on this page are explained in the following table. 


Field Name Description 


RADIUS Server IP ' Enter the IP address of the RADIUS (Remote Authentication Dial In User Service) server asso- 
i ciated with your network. RADIUS server is used to authenticate the hosts on the wireless net- 


RADIUS Port Enter the port number for the RADIUS server. Port 1812 is the default and the current stand- 
: ard for RADIUS authentication per the IETF RFC 2865. Older servers may use port 1645. Options 
are 1- 65535. 


RADIUS Key (Optional) Enter the encryption key (if required) needed to authenticate to the specified 
: RADIUS server. 


WEP Encryption : This option is set to Enabled by default. It enables WEP (Wired Equivalent Privacy) mode. 


Encryption ; (Appears when WEP Encryption is set to Enabled) Select the length of the encryption 
Strength ; method. Options are 128-bit and 64-bit. 128-bit is the default and is the more robust option 
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Field Name Description 


‘ for security. 
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Current Network (Appears when WEP Encryption is set to Enabled) Select which of the four keys is presently 


‘in effect. 


Network Key 1-4 : (Appear when WEP Encryption is set to Enabled) Enter up to four encryption keys using the 
l on-screen instructions to achieve the desired security strength. 


WPA2 and Mixed WPA2/WPA Network Authentication 


The following fields appear when you select WPA2 or Mixed WPA2/WPA in the Network Authentication field. 


Manual Setup AP 


You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network and specify 
the encryption strength. 

Click 'Apply/Save' when done. 


Select SSID: SmartRG-b8ef-5G ~ 
Network Authentication: [wPa2 v 


Protected Management 
Frames: 


WPA2 Preauthentication: Disabled v 

Network Re-auth Interval: 3000 

WPA Group Rekey Interval: 0 

RADIUS Server IP Address: 0.0.0.0 
1812 


RADIUS Port: 

RADIUS Key: 

WPA/WAPI Encryption: AES x 
WEP Encryption: Disabled 


Modify the fields as needed and then click Apply/Save. 


The fields on this page are explained in the following table. 
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Field Name Description 


Protected Management : Select whether management frames are protected. Options are Disabled, Capable, and 
: Required. The default is Disabled, 


WPA2 Preauthentication l Select whether clients can pre-authenticate with the gateway while still connected to 
another AP. Options are Enabled and Disabled. The default is Disabled. 


Network Re-Auth Inter- Enter the interval at which the client must re-authenticate with the gateway. The 
: default is 36000 seconds (10 hours). 


WPA Group Rekey Inter- ; The frequency at which the gateway automatically updates the group key and sends it 
l to connected LAN client devices. Options are: 0 - 65535 seconds. The default is 0. 


RADIUS Server IP address Enter the IP address of the RADIUS (Remote Authentication Dial In User Service) server 
: associated with your network. 


Enter the port number for the RADIUS server. Port 1812 is the default and is the cur- 
i rent standard for RADIUS authentication per the IETF RFC 2865. Older servers may use 
: port 1645. Options are 1 - 65535. 


RADIUS Key (Optional) Enter the encryption key needed to authenticate to specified RADIUS Server. 


WPA/WAPI Encryption ; Select the encryption standard. This field is displays the option most compatible with 
' the selected network authentication method. Options are: 


e AES: Advanced Encryption Standard. This is the default. 


e TKIP+AES: AES combined with TKIP (Temporary Key Integrity Protocol) allows 
access by either standard. 


WEP Encryption : This option is set to Disabled and cannot be changed. It enables Wired Equivalent Pri- 
: vacy (WEP) mode. 


WPA2-PSK and Mixed WPA2/WPA-PSK Network Authentication 


The following fields appear when you select WPA2-PSK or Mixed WPA2/WPA-PSK in the Network Authentication field. 
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Manual Setup AP 


You can set the network authentication method, selecting data encryption, 

specify whether a network key is required to authenticate to this wireless network 
and specify the encryption strength. 

Click “Apply/Save" when done. 


Select SSID: | SmartRG-9d86 ~ 


Network Authentication: WPA2 -PSK vj 


Protected Management 
Frames: Ve 


WPA passphrase: seeereroes Click here to display 
C Use base MAC address as default WPA passphrase 


WPA Group Rekey Interval: |0 


WPA Encryption: AES ¥ 
WEP Encryption: Disabled 


Modify the fields as needed and then click Apply/Save. 


The fields on this page are explained in the following table. 


Field Name Description 


Protected Management ‘Select whether management frames are protected. Options are Disabled, Capable, and 
Frames ‘ Required. The default is Disabled. 


Use base MAC address as : Select to use the gateway's MAC address as the passphrase for wireless security. 
default WPA passphrase : 


WPA Group Rekey Inter- : The frequency at which the gateway automatically updates the group key and sends it 
‘to connected LAN client devices. Options are: 1 - 65535 seconds. 
; Select the encryption standard. This field is displays the option most compatible with 
l the selected network authentication method. Options are: 


e AES: Advanced Encryption Standard. 
e TKIP+AES: AES combined with TKIP (Temporary Key Integrity Protocol). 


WEP Encryption ; This option is set to Disabled and cannot be changed. It disables WEP (Wired Equivalent 
: Privacy) mode. 
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MAC Filter 


On this page, you can configure whether wireless clients are allowed to access the wireless network of the wireless gate- 
way. 


1. In the left navigation bar, click Wireless > MAC Filter. The following page appears. 
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Wireless -- MAC Filter 


Select SSID: [SmartRG-9d86 ~ 


MAC Restrict @ O O Note: If ‘allow’ is choosed and mac 


Mode: Disabled Allow Deny filter is empty, WPS will be disabled 


2. In the Select SSID field, select the access point that you want to configure. 
3. Select the MAC Restrict Mode. Options are: 


e Disabled: Disable wireless MAC address filtering. 
e Allow: Allow the wireless clients in the MAC Address list to access the wireless network. 


Note: For this option to work, you must add at least one MAC address to this page. 


e Deny: Reject the wireless clients in the MAC Address list to access the wireless network. 
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4. Toadd a MAC Address to the filter list: 
a. Click Add. The following page appears. 
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Wireless -- MAC Filter 


Enter the MAC address and dick “Apply/Save" to add the MAC address to the wireless 
MAC address filters. 


MAC Address: [ ] 


b. Enter the MAC address of the wireless client. 
c. Click Apply/Save to save the address to the list. 


5. To remove a MAC address from the list, click the Remove check box next to it and then click the Remove button. 
The list refreshes. 


Wireless Bridge 


On this page, you can configure the wireless bridge features of the wireless LAN interface. 
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SMART/RG 


In the left navigation menu, click Wireless > Wireless Bridge. The following page appears. 
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Wireless -- Bridge 


This page allows you to configure the wireless bridge features for the wireless LAN interface, Select 
Disabled’ for Bridge Restrict’ to disable wireless bridge restriction, and any wireless bridge will be 
granted access. Selecting Enabled or Enabled(Scany' enables the wireless bridge restriction, and 
only those bridges specified by Remote Bridges MAC Address’ will be granted access. 

Click “Refresh” to update the remote bridges. Wait for a few seconds for the update to complete. 
Click “Appty/Save" to configure the wireless bridge options. 


AP Mode: “Access Pont v 


Bridge Restrict: | Enabled ~] 
Remote Bridges MAC Address: 


2. Modify the fields as needed, using the information provided in the field description table below. 


Field Name Description 


Bridge Restrict: Enable or disable the bridge restrict function for MAC addresses in the Remote Bridges MAC 


Address field. Options are: 


e Disabled: Disable the wireless MAC address filtering function. Any wireless bridge can 
access the wireless LAN. 


e Enabled and Enabled (Scan): Allow only those bridges selected in the Remote Bridges 
MAC Address table to access the wireless LAN. This is the default. 


Remote Bridges ‘Enter up to four MAC addresses for the remote bridges that are allowed to access the wireless - 
MAC Address “LAN. 


3. Click Apply/Save to save your settings. 


Advanced 


On this page, you can configure the advanced features of the wireless LAN interface. You can select a particular channel on 


which to operate, force the transmission rate to a desired speed, set the fragmentation threshold, the RTS threshold, the 
wakeup interval for clients in power-save mode, and more. 


Note: The default settings work for most environments. It is recommended that only experienced users change settings on 
this page. 
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1. In the left navigation bar, click Wireless > Advanced. The following page appears. 
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Wireless — Advanced 

This page allws you to configure advanced features of the wireless LAN interface. You can 

select a particular channel on which to operate, force the transmission rate to a particular 
Device Info speed, set the fragmentation threshold, set the RTS threshold, set the wakeup interval for 
chents in power-save mode, set the beacon interval for the access point, set XPress mode and 
set whether short or long preambles are used, 
Click 'Apply/Save' to configure the advanced wireless options. 


Advanced Setup 


Wirvlers 


Station adc 
wii 


Wi Pascpount 


802.11n Rate: 
Dias Yooks 802.11n Protection: 


Auto v 
802. ch i 
Menagement on 11n Client 


ST RIFS Advertisement: Auto ~ 
OBSS Co-Existance: [Disable ~ 


Onegnostacs 


2. Modify the fields as needed, using the information in the field description table. 
3. Click Apply/Save to commit your changes. 
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The fields on this page are explained in the following table. 


Field Name Description 


; The only option for this field is 2.4GHz. 


Select the WiFi channel you want to use. This gateway supports auto-channeling. The 
l default is Auto. The current channel number displays to the right of the field. 


‘ All devices in your wireless network must use the same channel in order to work cor- 


Enter the frequency (in minutes) at which the gateway scans channels for interference. 
: If a threshold of inference is detected, a new channel will be selected automatically. 
‘ Options are: 0 - 65535 minutes. The default is 15 minutes. 


: Select the operating bandwidth. Options are 20 MHz, 40 MHz, and 80 MHz. The current 
: bandwidth setting displays to the right of the field. 


MIMO Data rate Select the desired physical transmission rate. The rate of data transmission should be 
; set depending on the speed of your wireless network. You can select from a range of 
‘ transmission speeds (1 - 15), or you can select Auto to have the gateway automatically 
‘use the fastest possible data rate and enable the Auto-Fallback feature. Auto-Fallback 
‘will negotiate the best possible connection speed between the gateway and a wireless 
‘client. The default is Auto. 


RTS/CTS Protection ; Select whether to enable 802.11n and legacy clients to both work effectively on the net- 
: work. Options are: 


e Auto: Provides maximum security but produces a noticeable impact on through- 
put. With this option, RTS/CTS behavior permits legacy clients to become aware 
of 802.11n transmit times, but decreases overall throughput. This is the default. 


e Off: Provides better throughput. 


Support MIMO Clients Select whether to restrict non-MIMO clients from accessing the gateway. Options are On 
and Off. The default is Off. 


‘RIFS (Reduced InterFrame Speed) is the time in micro seconds by which the multiple 
‘ transmissions from a single station is separated. This option Improves performance by 
: reducing dead time required between OFDM transmission. Options are Off and Auto. 
: The default is Auto. 


OBSS Co-Existence ‘ Coexistence of Overlapping Basic Service Sets (OBSS) prevents overlapping in the 20 MHz 
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RX Chain Power Save 


RX Chain Power Save 
Ouiet Time 
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Description 


‘and 40 MHz frequencies. Options are: 

e Enable: The gateway automatically reverts to 20 MHz channel bandwidth when 
another WiFi network within 2 channels of its own channel is detected or when a 
client device with its 40 MHz Intolerant bit set is detected. This is the default. 

e Disable: The gateway advertises and operates in 40 MHz mode regardless of what 
other networks are configured nearby. 


; Select whether to turn on power-save mode. Options are Disable and Enable. 


Note: Before setting this parameter, set MIMO-OFDM to Auto. 


‘Enter the number of minutes that will elapse before quiet time begins. The default is 


RX Chain Power Save PPS: Enter the number of seconds for the throughput threshold for when the router engages 


Multicast Rate 


Basic Rate 


Fragmentation 
Threshold 


RTS Threshold 
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: power save mode after the quiet time seconds have elapsed. The default is 10. 


‘Select the multicast transmission rate for the network according to the speed of your 
‘wireless network. Select from a range of transmission speeds or select Auto to have the 
i gateway automatically use the fastest possible data rate and enable the Auto-Fallback 
‘feature. Auto-Fallback will negotiate the best possible connection speed between the 

i gateway and a wireless client. 


‘Options are Auto and 1 - 54 Mbps. The default is Auto. 
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‘Select the basic transmission rate ability for the AP. Options are Default, All, 1 & 2 
: Mbps, and 1 & 2 & 5.5 & 6 & 11 & 12 & 24 Mbps. The default is Default. 


' Enter the size at which packets will be fragmented into smaller units. The primary con- 
: sideration for this setting is the size/capability of the circuit. Options are 256 - 2346 
‘bytes. The default is 2346 bytes. 


i Note: A high packet error rate is an indication that a slightly increased fragmentation 
‘threshold is needed. When possible, the default value of 2346 bytes should be main- 
‘ tained. Poor throughput is a likely result of setting this threshold too low. 
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The gateway sends Request to Send (RTS) frames to a particular receiving station and 
i negotiates the sending of a data frame. After receiving an RTS, the wireless station 
‘responds with a Clear to Send (CTS) frame to acknowledge the right to begin trans- 

‘ mission. 


If a packet is smaller than this setting, the WLAN client hardware does not invoke its 
‘RTS/CTS mechanism. Options are 256 - 2347 bytes. 


‘The default value (2347, disabled) should be left in place unless you encounter incon- 
‘ sistent data flow. In that case, make minor reductions to this value until the issue is 
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Field Name Description 
: resolved. 


: Enter the Delivery Traffic Indication Message (DTIM or Beacon rate) countdown variable 
i used to indicate when the next window is available to client devices for listening to buf- 
: fered broadcast and multicast messages. Options are 1 - 255. The default is 1. 


Beacon Interval ; A beacon is a packet of information that is sent from a connected device to all other 
l devices where it announces its availability and readiness. A beacon interval is the period 
‘of time (sent with the beacon) that the device waits before sending the beacon again. 


: Enter the time interval (in milliseconds) between beacon transmissions. Options are 1 - 
: 65535 ms. The default is 100 ms, which is recommended. 


Global Max Clients Enter the maximum number of clients that can assess this wireless network at one time. 
: The maximum for 5 GHZ is 80; the maximum for 2.4 GHZ is 128. The default is 128. 


; Note: You must change this field before you can change the Max Clients on the Wireless 
: > Basic. page. 


Xpress ™ Technology ' Select whether to enable Xpress Technology. This is a special accelerating technology 
for IEEE802.119. Options are Enabled and Disabled. 


WMM (WiFi Multimedia) Select whether to enable this technology. It allows multimedia services (audio, video 
and voice packets) to get higher priority for transmission. Options are Auto, Enabled, 
‘and Disabled. The default is Enabled. 


l Warning: If you disable this option, all QoS queues and classifications defined for the 
‘wireless network are also disabled. 


WMM No Acknow- The acknowledge policy used at the MAC level. Enabling this option allows better 
ledgment : throughput but, in a noisy RF environment, higher -963error rates may result. The 
i default is Disabled, meaning that an acknowledgement packet is returned for every 
‘ packet received. This provides a more reliable transmission but increases traffic load, 
which decreases performance. Disabling the acknowledgement can be useful for Voice, 
‘ for example, where speed of transmission is important and packet loss is tolerable toa 
l certain degree. Options are Enabled and Disabled. The default is Disabled. 


WMM APSD : APSD (Automatic Power Save Delivery) is an automatic power saving feature. Enabling 
‘ ensures very low power consumption. WMM Power Save is an improvement to the 
i 802.11e amendment, adding advanced power management functionality to WMM. 
‘ Options are Enabled and Disabled. The default is Enabled. 
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Band Steering ; Select whether to detect if the client has the ability to use two bands. When enabled, 
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Field Name Description 


: the less-congested 5GHz network is selected (by blocking the client's 2.4GHz network). 
i Options are Disabled and Enabled. The default is Disabled. 


Select whether to enable scheduling of traffic to improve efficienty and increase usable 
‘ bandwidth for some types of packets by delaying other types. Options are Disable and 
: Enable. The default is Disable. 


Airtime Fairness ‘Select how the gateway will manage the receiving signal with other devices. Options are 
: Disable and Enable. The default is Enable. 


Station Info 


On this page, you can view the authenticated wireless stations and their status. 
In the left navigation menu, click Wireless > Station Info. The following page appears. 
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Wireless -- Authenticated Stations 


This page shows authenticated wireless stations and their status. 


To update the data, click Refresh. 
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DIAGNOSTICS 


in this section, you can run line performance tests. Three legs of the data path are included in the available tests: LAN con- 
nectivity, DSL connectivity and Internet connectivity tests. 


You can also ping a host or trace a connection. 


Diagnostics 
On this page, you can view information about your DSL connections. 


1. In the left navigation bar, click Diagnostics > Diagnostics. The following page appears. 
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ipoe 0 0 35 Diagnostics 


Your modem is capable of testing your DSL connection. The individual tests 
are listed below. If a test displays a fail status, dick "Rerun Diagnostic Tests” 
at the bottom of this page to make sure the fail status is consistent. If the 
test continues to fail, dick “Help” and follow the troubleshooting 
procedures. 


Test the connection to your local network 


Test the connection to your Internet 


t gate 
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2. Torefresh the displayed data, click Test at the bottom of the page. 


The normal test method is initiated, utilizing OAM F5 loopback cells. The table is updated with fresh diagnostic 
information about connection integrity. To learn more about what is being tested and what actions to take in the 
event that a particular test should fail, click the Help link at the far right of each line item. 


3. Totest at the VP level instead of at an individual VC connection, click Test With OAM F4. 


4. Totest additional connections, click Next Connection. The page refreshes to show data for the next connection and 
the Previous Connection button appears. Repeat steps 2-4 for each connection. 


Ping Host 


On this page you can ping aserver by host name or IP address. 


1. In the left navigation menu, click Diagnostics Tools > Ping Host. The following page appears. 
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Ping Host 


Enter the IP address of the device that you wish to ping. The results will 


take a few moments (up to 15 seconds) to appear. 


Target Host Address: | | Ping Hose 


2. Enter the host name or IP address. 
3. Click Submit. The details of the ping appear on the page. 
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PING 192.168.1.2 (192.168. 1.2): 56 data bytes 

64 bytes from 192.168.1.2: seq=0 ttle 128 time=1.342 ms 
64 bytes from 192.168.1.2: seq=1 tel-128 time=0.862 ms 
64 bytes from 192.168.1.2: seqe2 tels 128 times0.988 ms 
64 bytes from 192.168.1.2: seq=3 ttl=128 time=0.998 ms 


=- 192.168.1.2 ping statistics --- 
4 packets transmitted, 4 packets received, O% packet loss 
round-trip min/avg/max = 0.862/1.047/1.342 ms 


COMPLETED 
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Trace Route to Host 


On this page, you can use the Trace Route utility to trace a connection. 


1. In the left navigation menu, click Diagnostics Tools > Trace Route to Host. The following page appears. 
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Trace Route to Host 


Enter the IP address of the device that you wish to trace. The results will 
take a few moments (up to 15 seconds) to appear. 


Target Host Address: | | | Trace Route to Hest | 


2. Enter the host name or IP address that you want to trace. 
3. Click Trace Route to Host. The details of the trace appear on the page. 
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traceroute to 192.168.1.2 (192.168.1.2), 10 hops max, 38 byte packets 
dee 
2°°* 
37° 
qee 
gee 
qe 
gee 
gee 
gee 
10°* 


COMPLETED 
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Settings 

In this section, you can back up the current settings, restore saved settings, or reset the gateway to default settings. 
Backup 

You can back up the current settings for your gateway to a file stored on your computer. 


1. In the left navigation bar, click Management. The following page appears. 
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Settings — Backup 


Backup Running Broadband Router Settings. You may save your router 
running settings to a file on your PC. 


Bactup Berig Setongs 


Backup Default Broadband Router Settings. You may save your router default 
settings to a file on your PC, 


2. Tosave a backup file of the currently running settings to a local drive, click Backup Running Settings. The File 
Upload dialog box appears. Click OK. The backupsettings.conf file is created in your default download location. 

3. To save a backup file of the default settings to a local drive, click Backup Default Settings. The Save dialog box 
appears. Click OK. The backupdefaultsettings.conf file is created in your default download location. 


Note: If you plan to create backups frequently, you may want to rename the backup files by appending dates to the file 
name. Otherwise, every new backup file overwrites the existing backup file. 


Update 


On this page, you can restore previously backed-up gateway settings. Both current and default settings can be managed 
here. 
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1. In the left navigation bar, click Management > Settings > Update. The following page appears. 
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Settings -- Update 


Update Running Broadband Router Settings. You may update your router 
running settings using your saved files. 


Settings File Name: | Browse No fle selected. 


Update Default Broadband Router Settings. You may update your router 
default settings using your saved files. 


Settings File Name: 


2. Click the Browse button for the type of setting you wish to restore. 
3. Locate the desired .conf file on your local system and click Open. 


4. Click the appropriate Update button. 
The gateway reboots when the update has completed. 


Restore Default 


On this page, you can reset the gateway to its default settings which can be the factory defaults or defaults that you cus- 
tomized and stored. For details, see "Restore Default" and "Restore Default" sections above. 


1. In the left navigation bar, click Management > Settings > Restore Default. The following page appears. 
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Settings -- Restore Default 


Restore Broadband Router setting to the defaults. 


2. Click Restore Default Settings. The gateway is rebooted and the default settings overwrite the previous settings. 
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System Log 
On this page you can view and configure the system log generated for your gateway. 


1. In the left navigation bar, click Management > System Log. The following page appears. 
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System Log 


The System Log dialog allows you to view the System Log and configure the System Log options. 


Click “View System Lof” to view the System Log. 


Click “Configure System Log” to configure the System Log options. 


2. Toview the contents of the system log, click View System Log. The System Log details page appears. 


Switch to tab: | 192.168.1.1/edmin/logview.cnd 


xy l I í 
Giona eoeroekrr ree CaTmBik: Time Blocking: Shutting down, sig -1 
Jan 1 - . 
N N ELE Ee 
IT N systog: COM:caCdmPolF orMessages: unrecognized msg Ox10000250 


syslog: httpd:644.295:cgiVatidateSessionkey:2356:fañed session key check. Got 2135380610, 
00 expected 658209780, age=0 max=600000 


Jan 1 sysiog: Nttpd:790.530:cgiVaticateSessionKey:2356:fatied session key check. Got 685698293, 
expected 1511422544, age=0 max=600000 


persis laeenonkrt kernet Line 1: xDSL G.994 training 
lan t ` 

Eis ok eemmer 
MA NEE 


3. To update the displayed entries, click Refresh. 
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4. To modify the system log settings: 
a. Click Configure System Log. The System Log - Configuration page appears. 
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System Log — Configuration 


if the log mode Is enabled, the system will begin to log al the selected events. For the Log Level, 
al events above or equal to the selected level wil be logged. For the Display Level, all logged 
events above or equal to the selected level will be displayed. If the selected mode ts Remote’ or 
Both,’ events wil be sent to the specified IP address and UDP port of the remote syslog server. If 
the selected mode Is Local’ or Both,” events will be recorded in the local memory. 


Select the desired values and dick 'Appty/Save’ to configure the system log options. 


Log: @ Disable © Enable 
Log Level: Debugging y ~ 
Display Level: | Error v| 
Mode: [loa ~ 


b. Modify the settings as needed, using the information provided in the following table. 


Logging Level : Select Error unless actively troubleshooting a situation with a subscriber for which 
: increased log detail is required. Options are Emergency, Alert, Critical, Error, Notice, 
: Warning, Informational, and Debugging. The options are listed in top-down order. The 
: default is Debugging. 


Display Level : Select Error unless actively troubleshooting a situation with a subscriber for which 
: increased detail is required. This field has the same options as the Logging Level field. The 
: default is Error. 


Select where log events will be sent. 


To send logs to the specified IP address and UDP port of a remote syslog server, select 
‘Remote or Both. 


! To record events in the local memory of your SmartRG gateway, select Local or Both. 


c. Click Apply/Save to save your changes. 
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Security Log 


The security log contains a history of events related to sensitive access to the gateway. Logged events include: 


2. 


Password change success/failure 
Authorized login success/failure 
Authorized user logged out 

Security lockout added/removed 
Authorized/unauthorized resource access 
Software update 


In the left navigation bar, click Management > Security Log. The following page appears. 
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Security Log 
The Security Log dialog allows you to view the Security Log. 
Click "View" to view the Security Log. 


Click "Reset" to dear and reset the Security Log. 


Right-click here to save Security Log to a file, 


Do any of the following: 
e Toview the log, click View. 
e Topurge the log entries and start fresh, click Reset. A confirmation message appears. Click Close. 
e Toexport the log toa local drive, click the here link in the last line of the instructions on the page. The log 
appears in the browser window. You can save the page or select all of the log text, paste it into a Notepad 
window and save the file. 


SNMP Agent 


On this page, you can configure the SNMP (Simple Network Management Protocol) settings to retrieve statistics from the 
SNMP agent for the gateway. You can enable or disable the SNMP agent and set parameters such as the read community, 
system name and trap manager IP. 
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1. In the left navigation bar, click Management > SNMP Agent. The following page appears. 
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SNMP - Configuration 


Simple Network Management Protocol (SNMP) allows a management application to 
retrieve statistics and status from the SNMP agent in this device. 


Select the desired values and dick “Apply” to configure the SNMP options. 


SNMP Agent @ Disable O Enable 


Read Community: 
Set Community: 
System Name; 
System Location: 
System Contact: 
Trap Manager IP: 


2. Modify the fields as needed. 
3. Click Save/Apply to commit your changes. 


The fields on this page are explained in the following table. 


Field Name Description 


Read Community ‘The options are public and private. The default is public. 


System Contact ‘The contact for the system. 
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Trap Manager IP ‘The IP address where the trap manager is installed. 


Management Server 


SmartRG gateways support TR-069 based standards for remote management, including STUN server configuration. In this sec- 
tion, you can configure the gateway with details about the management ACS (Auto Configuration Server) to which this gate- 
way will be linked. 
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TR-069 


The TR-069 client screen contains default connection parameters and generally only needs to be enabled, pointed to the 
ACS URL, and any required ACS Username and ACS Password entered. This manual does not cover the setup of your ACS. If 
you need to modify the default settings, consult the materials provided by your ACS vendor to determine the appropriate 
parameters and server settings. 
SmartRG products can accommodate several ACS products, including: 

e Device Manager by SmartRG 

e Cisco Prime Home 

e Calix Consumer ACS 


1. In the left navigation bar, click Management > Management Server. The following page appears. 
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TR-069 Client -- Configuration 


WAN Management Protocol (TR-069) allows a Auto-Configuration Server (ACS) to perform 
auto-configuration, provision, collection, and diagnostics to this device. 


Select the desired values and click “Apply/Save” to configure the TR-069 client options. 


OUI-Serial @ MAC O Serial Number 


TR-069 Client 


ACS URL from DHCP: 


inform Interval: 

ACS URL: 

ACS User Name: 

ACS Password: 

TR-069 Client Port: 

WAN Interface used by TR-069 cient: 


Connection Request Authentication 


Connection Request User Name: armen 
Connection Request Password: sess. 
Connection Request URL: http://10.101.2.156:30005/ 
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2. Complete the necessary fields per the instructions from your ACS platform vendor. 


The fields on this page are explained in the following table. 


Field Name Description 
‘Select whether to disable this function. 


‘Enter the frequency (in seconds) at which the CPE (gateway) checks in with the ACS to 
sync and exchange data. A typical production environment has CPEs informing to the ACS 
‘once/day or every 86,400 seconds. 


l Enter the URL for the CPE to connect to the ACS using the CPE WAN Management Pro- 
‘tocol. This parameter MUST be in the form of a valid HTTP or HTTPS URL. An HTTPS URL 
: indicates that the ACS supports SSL. The "host" portion of this URL is used by the CPE for 
‘validating the certificate from the ACS when using certificate-based authentication. 


You can include a port specification suffix if your ACS platform requires it, e.g., http://- 
‘ customer.acs.wanmanagmentservices.com:30005 where 30005 is the port number. The 
‘default port is 30005. 


WAN Interface used by Select any WAN, LAN, Loopback or configured connection to identify how this gateway 
TR-069 client : will connect to the ACS. 


Display SOAP messages ‘Select whether to enable the display of messages on consoles. 
on serial console : 


3. (Optional) To configure the modem client Connection Request mechanism used by your ACS for communication with 
subscriber gateways, click Connection Request Authentication. Additional fields appear. 
Note: Consult with your ACS vendor for any specific connection request requirement impacted by the following set- 
tings. 


Field Name Description 


Connection Request User- ; Enter the user name by which this gateway authenticates the ACS. For example, 
: many ACS platforms use “admin” or “tr069”. 


Connection Request Port / ‘There is typically no need to set the Connection Request URL as it is normally estab- 


URL ‘lished automatically based on the effective WAN IP. The port can be configured if 
‘needed. An example value might be "http://XXX.XXXx.XxXx.xXxXx:30005/" where the xxx 
‘values are specific WAN IP octet numbers. 
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Field Name Description 


“The default port value is 30005. 


4. Toforce the gateway to attempt to sync with the ACS, click the GetRPCMethods button. This will assist you in veri- 
fying the TR-069 parameters entered above. 
5. Click Apply/Save to commit your changes. 


STUN Config 


STUN stands for “Simple Traversal of UDP through NATs”. STUN enables a device to find out its public IP address and the 
type of NAT service it is sitting behind. 


STUN is most commonly used with older modems under ACS management connected via a NAT gateway. NAT accommodates 
a LAN-side device that has been allocated a Private IP address such as a CPE device on a private network behind an ONT. In 
this instance, the regular CWMP Connection Request mechanism to talk to the modem gateway cannot be used to initiate a 
session with that ACS. 


A STUN server receives STUN requests and sends STUN responses. STUN servers are generally attached to the public Inter- 
net. 


On this page, when a STUN server is present within the infrastructure of the Service Provider, you can configure this gate- 


way with the connectivity specifics for that server. 


1. In the left navigation bar, click Management > Management Server > STUN Config. The STUN Configuration page 
appears. 
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TR-069 Client -- STUN Configuration 


Select the desired values and dick “Apply” to configure the TR-069 Gient STUN options. 


O STUN Server support 


2. To view the required STUN settings, click STUN Server Support. 

3. Complete the fields in accordance with the implementation specifics of your server. Information about the fields is 
provided in the table below. 

4. Click Save/Apply to commit your changes. 


The fields on this page are explained in the following table. 
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Field Name Description 


STUN Server Address ‘The physical STUN server’s assigned network address. An invalid address will produce 
; an immediate on-page error message from the gateway. You can enter a maximum of 
: 256 characters 


An ACS server may also have STUN functionality running on the same physical box. Con- 
‘sult your ACS vendor for implementation options and also TR-069 protocol doc- 
‘umentation, if necessary. 

STUN Server Port : Set the port number associated with your STUN server infrastructure. Options are 0 - 
: 64435. The default is 3478. 


STUN Server User Name ‘The username by which the gateway accesses the STUN infrastructure. Maximum 
length is 256 characters. Special characters are valid. 


‘The password by which the modem authenticates the above username to the STUN 
; infrastructure. Maximum length is 256 characters. Special characters are valid. The 
‘value will be hidden. 


STUN Server Maximum : Enter the maximum keepalive time in seconds. Options are any integer. The default is - 
Keep Alive Period * 1 (no maximum time). 


STUN Server Minimum : Enter the maximum keepalive time in seconds. Options are any integer. The default is 
Keep Alive Period * ; 0. 


* This mechanism is used in coordination with the refreshing of NAT bindings. Specifically, in conjunction with use of Restric- 
ted Cone NAT or Port Restricted Cone NAT (as may be configured in some gateways). A device’s internal address / port map- 
pings, which the STUN protocol is allowed to make use of, can have keep alive values attributed. These minimum and 
maximum keep alive times define respectively, the minimum time to retain the mapping information STUN has discovered, 
and the maximum time to retain that information, before refreshing it through forced re-discovery. 


Which values are appropriate for these two fields is influenced by a variety of environmental factors including devices types 
deployed, services employed and NAT configuration options enabled within the topology. 


With the above-mentioned NAT schemes, it is possible the network address translation initially established may not be used 
after a specified elapsed time. Such internal mapping is dropped. The gateway will then assign a different address map- 
ping. This mechanism allows for coordinated refresh on the bindings for mappings it uses. For further information, review 
STUN-related RFCs. 


Internet Time 


On this page, you can configure the gateway to synchronize its time with the Internet time servers. This feature is enabled 
by default. 
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1. In the left navigation bar, click Management > Internet Time. The following page appears. 
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Time settings 


This page allows you to change the modem' time configuration. 


C Automatically synchronize with Internet time servers 


Click Automatically synchronize with Internet time servers. Additional fields appears. 

Select the desired time servers. 

Select the Time zone offset. 

Click Apply/Save to save and apply your settings. 

To disable this feature, click the Automatically synchronize with Internet time servers check box to clear it. 
Click Apply/Save. 


SS EL Pe ws 


Access Control 


In this section, you can manage access to your gateway and network. You can configure passwords, accounts, services, the 
logout timer, and access lists. 


Accounts 


On this page, you can create and manage user accounts for your gateway. Your gateway can support multiple login accounts 
for its on-board user interface. Each account can be customized to grant access privileges to specific pages in the interface. 
This is particularly useful when an ISP wishes to limit access for subscribers, yet grant full access for technical support and 
on-site installation personnel. 


Note: This feature requires firmware v2.5.0.7 or later. 
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Add an Account 


1. In the left navigation bar, click Management > Access Control > Accounts. The following page appears. 
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O Summary 
Owan 
OStatistics 
Ooste 
Oaar 
Oor 


OD advanced Setup 
Ollayor 2 interface 
COWAN Service 


OG LTE Settings 
OEhemet Config 


Certificate 
Omatticast 
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2. Toset up anew user, click Create Account. The following page appears. 
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OOevice info 
OSemenary 
Owan 
OStatistics 
ORoute 
Oaar 
Oor 


O Advanced Setup 


Ollayor 2 interface 
COWAN Service 


0146 LTE Settings 
OlEthemet Config 
DUN 

Oat 

O Security 

C Parentia Control 
C Quality of Service 


C Certificate 
C Muiticast 


Owiretess 

O Basic 

O Security 
OMAC Filter 

O wireless Bridge 
DAévanced 

O Station info 


Dooie 
O Diagnostics 
OEthħemet OAM 
OPing Host 
C Trace Route to Host 


DO Management 
O Settings 
O system Log 
OSecurity Log 
OSNMP Agent 
C Management Server 
Ci internet Time 
O Access Contrat 
Clupdate Software 
ORedoot 


C Support Tools 


C Port Mirroring 
OFactory reset 


3. Enter a Username and Password for the new account. 


4. Select the features that you want this user to access. If you select a category, the subordinate boxes are also selec- 
ted. For example, if you select Support Tools, Port Mirroring and Factory Reset are selected as well. 


5. Click Save Account to commit your changes. The new account is created. To test the account credentials, log out of 
the interface and then log back in using the new account. 
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Modify or Delete an Account 


Note: You can NOT delete the default user accounts (Admin, Support, MFG, or User) but you can disable all but the Admin 
accounts. The default passwords for the default user accounts are listed in the "Default Passwords" section of this topic. 


1. Make sure you are logged into the gateway as an Admin or Support user. 


2. In the left navigation bar, click Management > Access Control > Accounts and then click Delete/Modify Account. 
The Delete/Edit Account page appears. 


SMART/RG 


| forward thinking 


Delete/Edit Account 


Select an account = support ~ | 
Enable/Disable account: @ Enable O Disable 
Username fncpert ] 


Privileges for support, user and 'nfg accounts cannot be customized. 


mata aa a d 


3. In the Select an account field, select the account you wish to modify or delete. 
4. Doone of the following: 


a. Todisable or enable the account, click the appropriate Enable/Disable account button and then click 
Update Account (at the borrom of the page). 


b. Tomodify the account, check or clear the check boxes for the privileges as needed, and then click Update 
Account to commit your changes. 


c. Todelete the account, click Delete Account. A confirming message appears. Click OK. 


Your changes are implemented immediately. 
Default Passwords 


PASSWORD 


‘ IDH7iw@ibRsPOIBa 


Services 


On this page, you can define a Service Control List to control which services (FTP, HTTP, Telnet, etc.) are restricted on the 
LAN. 
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1. In the left navigation bar, click Management > Access Control > Services. The following page appears. 
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Access Control -- Services 


A Service Control List ("SOL") is used to enable or disable network services on the 
gateway. 
Note: LAN side firewall must be enabled to modify LAN SCLs. 


2. Modify settings as needed, using the information in the following table. 
3. Click Save/Apply to commit your settings. 


The fields on this page are explained in the following table. 


Field Name Description 


l Select the SCL services that you want to be enabled. Options are FTP, HTTP, ICMP, SNMP, 
: SSH, TELNET, and TFTP. 


Click this checkbox to implement secured HTTP. 


l Warning: When you click this option, the gateway reboots. 


Select the services enabled on LAN side firewall. Depending on configuration settings made 
; elsewhere in the GUI, this column may be read-only. 


: Note: ICMP is an always-enabled service by default and has no checkbox. 


E E ES TETTERE EO EO E E E OE E E E seed EE OO 


i Select the services enabled on the WAN side firewall. 
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Field Name Description 


WAN Port Number i Enter the port to which the access control applies on the WAN side for the given service. 
i Except where noted below, the service ports are the default ports for the WAN. 


‘FTP service access. 


Seb SC EET EE ETE EET TE EL EIN LL BREI EER EES EA IR AE EE EE EED 


HTTP l HTTP Service access. (This is in association with the specified port.) The default port is 80. 


IE EE RI EE EE EE LE ETE EE LE EET ER OT IE IE EE OT eR oe eee ETE 


‘ICMP service access. 


Passwords 


On this page, you can create or change passwords associated with access to the gateway. Three accounts are available to 
manage: Admin, Support and User. 
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1. In the left navigation bar, click Management > Access Control > Passwords. The following page appears. 


SMART/RG' SR506n 


forward thinking 


Access Control -- Passwords 


Access to your Router is controlled through three user accounts: admin, 
support, and user. 


The user name "admin" has unrestricted access to change and view 
configuration of your Router. 


The user name “support” is used to allow an ISP technician to access your 
Router for maintenance and to run diagnostics. 


The user name “user” can access the Router, view configuration settings and 
statistics, as well as update the router's software. 


Use the fields below to enter up to 16 characters and dick “Apply/Save" to 
change or create passwords. Note: Password cannot contain a space. 


User Name: sam 
Old Password: stews 
New Password: | 


Confirm Password: j 


| Meier | 


2. In the New Password and Confirm Password fields, enter the new password. 
3. Click Apply/Save to implement the change. 


Access List 
On this page, you can create and manage access control lists to control inbound access to specific IP addresses. 


1. In the left navigation bar, click Management > Access Control > Access List. The following page appears, showing 
any addresses already configured for managed access. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL. ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


SMART/RG' SR506n 


forward thinking 


Management Access Lists 


ACLs allow the admin to restrict inbound WAN-side management 
connections to specified source addresses. 
The specified address should be in CIDR format. 


Address Examples: 
192.168.1.50/24 will allow access to all hosts in the 192.168.1.0 


subnetwork. 
72.185.226.106/32 will allow access only to the host with IP address 
72.185.226.106. 


A reboot may be required for certain complex configurations. 


A maximum of 10 entries can be added. 


2. Toadd an address: 
a. Click Add. The following page appears. 


SMART/RG' SR506n 


forward thinking 


Management Access List 


Restrict inbound management connections to specified source address 


Source Address: 


b. Enter the address for which you want to restrict access. 
c. Click Apply/Save. You are returned to the Management Access Lists page. 
d. Toadd up to9 more addresses, repeat steps 2a - 2c. 
3. Toremove an address, click the Remove checkbox next to it and then click Remove. The list is updated. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL. ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


Logout Timer 
On this page, you can define the maximum time that a session can remain open before the gateway logs out. 


1. In the left navigation bar, click Management > Access Control > Logout Timer. The following page appears. 
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Access Control -- Logout Timer 


Here you can configure the automatic GUI logout timer. 
A value of zero disables the automatic logout feature. 


Logout Timer Period (enter a value between 0 and 60 


pet acca je 


2. In the Logout Timer Period field, type the number of minutes after which a session will be ended. Options are 0 - 
60 minutes. The default is 15 minutes. To disable this feature, enter a zero (0) in the field. 


Update Software 


On this page, you can update the firmware of your SmartRG gateway. Software updates for SmartRG products are available 
for download by direct customers of SmartRG via the SmartRG Customer Portal. 
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1. In the left navigation bar, click Management > Update Software. The following page appears. 
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Update Software 


Step 1: Obtain an updated software image file from your ISP. 


Step 2: Enter the path to the image file location in the box below or dick 
the “Browse” button to locate the image file. 


Step 3: Click the “Update Software” button once to upload the new image 
file. 


NOTE: The update process takes about 2 minutes to complete, and your 
Broadband Router will reboot. 


Software File Name: Browse. Ne file selected. 


2. Follow the on-page instructions. When the update has completed, the gateway reboots. 


Reboot 


Occasionally, troubleshooting measures may require that the gateway be rebooted. On this page, you can reboot your gate- 
way. 


1. In the left navigation bar, select Management > Reboot. The following page appears. 
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Click the button below to reboot the router. 


2. Click Reboot. Your gateway is rebooted and you must log in again if you want to make further changes. 
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LOGGING OUT 


1. Tolog out of your gateway, click Logout in the left navigation menu. The logout page appears. 
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Click the button below to log out of the GUI. 


2. Click the Logout button. A success message appears. 
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Q&A 


Q: Why are all the indicators off? 


A: Check the following: 


= The connection between the power adapter and the power socket. 
a The status of the power switch. 


Q: Why is the LAN indicator off? 


A: Check the following: 


m= The connection between the ADSL gateway and your computer, hub, or switch. 
m= The running status of your PC, hub, or switch. 


Q: Why is the DSL indicator off? 


A: Check the connection between the “DSL” port of gateway and the wall jack. 


Q: Why does Internet access fail while the DSL indicator is on? 


A: Check whether the VPI, VCI, user name, and password are correctly entered. 


Q: Why can't | access the web configuration page of the DSL gateway? 


A: Choose Start > Run from the desktop, and ping 192.168.1.1 (IP address of the DSL gateway). If the DSL gateway is not reach- 
able, check the type of the network cable, the connection between the DSL gateway and the PC, and the TCP/IP con- 
figuration of the PC. 


Q: How can I reload the default settings after anincorrect configuration? 


A: To restore the factory default settings, turn on the device, and press the reset button for about 1 second, and then 
release it. The default IP address and the subnet mask of the DSL gateway are 192.168.1.1 and 255.255.255.0, respectively. 


m User/password of super user: admin/admin 
m User/password of common user: user/user 
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APPENDIX A: ADVANCED FEATURES 


This appendix outlines the advanced feature set for SmartRG brand home gateway products. 


Connect-and-Surf (Automatic Broadband Connection Con- 
figuration) 


Connect-and-Surf automatically establishes a WAN connection for default-configured gateways, obviating the need for 
manual or custom configurations. The active physical layer is detected (ADSL, VDSL or GigE) and layer 3 connectivity is estab- 
lished using PPP authentication or DHCP. 


Notes 


e If you prefer to configure your SmartRG's WAN interface manually, connect a laptop to any of the LAN ports and fol- 
low the instructions in the "LOGGING IN TO YOUR GATEWAY'S UI" and "Management Server" sections of this User 
Manual. 


e Do not connect the WAN interface cable until after the configuration is completed. 


Activation (Automatic ACS Connection Configuration) 


SmartRG gateways are designed to discover their service provider-specific ACS management settings without custom firm- 
ware. SmartRG Inc. maintains an activation server that associates a device's MAC address with its service provider's ACS set- 
tings. The MAC addresses are entered into the activation server prior to delivery. Gateways contact the activation server to 
have their ACS settings modified upon initial power up (or after being reset to factory default settings). 


Note: Activation server support is provided for ALL SmartRG gateways at no additional cost. 


TR-069 Remote Management: Automated Configuration 
Server Support 


With a rich TR-069 heritage and a strong commitment to standards-based, remote management, SmartRG gateways are 
designed for maximum interoperability with industry leading, TR-069-based remote management systems. SmartRG gate- 
ways provide maximum remote manageability and the highest level of visibility into the connected home yielding: 

e Shorter integration times 

e Lower system integration costs 

e Improved customer support 

e Reduced operational expenses 
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SmartRG works closely with TR-069 automated configuration server (ACS) solutions providers to ensure "plug-n-play" inter- 
operability. See the following table for examples. 


Device Manager 
by SmartRG 


x: 
Calix 


COMPATIBLE 


AAFFINEGY 


ahali 
cisco 
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Device Manager by SmartRG 

Device Manager is a robust TR-069 ACS management platform which utilizes a secure cloud-based deploy- 
ment designed to be repeatable and portable. For more information, go to the Device Manager page on 
the SmartRG web site. 


Calix Compass/Consumer Connect ACS 

In addition to being Calix physical layer certified (to ensure Calix access equipment compatibility), 
SmartRG gateways have been tested to confirm maximum interoperability with the Calix Com- 
pass/Consumer Connect ACS solution. 


Affinegy ACS 
SmartRG gateways have been tested to confirm maximum interoperability with the Affinegy ACS solution. 


Cisco Prime Home™ ACS 


SmartRG gateways have a long history of Prime Home (formerly ClearVision) ACS interoperability. 


SMART/RG 


APPENDIX B: GATEWAY FEATURE 
COMPARISON 


SmartRG residential gateways combine WAN connectivity with a firewall-protected router and industry-leading TR-069 
remote management support. Most variants provide 802.11n Wi-Fi connectivity, as well. See the model-specific details 
below. For more information, contact SmartRG Support. 


Model Broadband Con- LAN LAN Managed Managed Wi-Fi Wi-Fi Signal IPv6 IPTV 
nection ports Device Dis- Firewall Monitor Ready 
covery 


: Tri-mode: ADSL2+, : 802.11n 

‘ VDSL2, GigE : : : 

: Tri-mode: ADSL2+, : 

` VDSL2, GigE 

l Tri-mode: ADSL2+, i i l : Dual-band concurrent: 
:  VDSL2,GigE : 802.11ac 


‘ Tri-mode: ADSL2+, : 
VDSL2, GigE 


: Tri-mode: ADSL2+, : 


VDSL2, GigE 


ADSL2+, Ethernet 


: Tri-mode: ADSL2+, ' 
VDSL2, GigE 


| Tri-mode: ADSL2+, : 
VDSL2, GigE 


; Dual-band concurrent: 
802.11ac 


802.11n 
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Model Broadband Con- LAN LAN Managed Managed Wi-Fi Wi-Fi Signal IPv6 IPTV 
nection ports Device Dis- Firewall Monitor Ready 
covery 


SR350NE | Ethernet 802.11n 
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APPENDIX C: FCC STATEMENTS 


This appendix includes the FCC statements that apply to the products described in this User Manual. 


FCC - PART 68 


This equipment complies with Part 68 of the FCC rules and the requirements adopted by the ACTA. On the bottom case of 
this equipment is a label that contains, among other information, a product identifier in the format US: VW7DLO1ASR506N, 
and REN: NAN for this equipment. 


This equipment uses the following USOC jacks: RJ-11/RJ45/USB/Power Jacks! 


A plug and jack used to connect this equipment to the premises wiring and telephone network must comply with the applic- 
able FCC Part 68 rules and requirements adopted by the ACTA. A compliant telephone cord and modular plug is provided 
with this product. It is designed to be connected to a compatible modular jack that is also compliant. See installation 
instructions for details. 


REN (RINGER EQUIVALENT NUMBERS) STATEMENT 
REN=0.1A 


Notice: The Ringer Equivalence Number (REN) assigned to each terminal device provides an indication of the maximum num- 
ber of terminals allowed to be connected toa telephone interface. The termination on an interface may consist of any com- 
bination of devices subject only to the requirement that the sum of the Ringer Equivalence Numbers of all the devices does 
not exceed 5. 


If this equipment VW7DLO1ASR506N causes harm to the telephone network, the telephone company will notify you in 
advance that temporary discontinuance of service may be required. But if advance notice isn't practical, the telephone com- 
pany will notify the customer as soon as possible. Also, you will be advised of your right to file a complaint with the FCC if 

you believe it is necessary. 


The telephone company may make changes in its facilities, equipment, operations or procedures that could affect the oper- 
ation of the equipment. If this happens the telephone company will provide advance notice in order for you to make neces- 
sary modifications to maintain uninterrupted service. 


If trouble is experienced with this equipment VW7DLO1ASR506N , for repair or warranty information, please contact 
SmartRG, Inc.. If the equipment is causing harm to the telephone network, the telephone company may request that you 
disconnect the equipment until the problem is resolved. 


Connection to party line service is subject to state tariffs. Contact the state public utility commission, public service com- 
mission or corporation commission for information. 


If your home has specially wired alarm equipment connected to the telephone line, ensure the installation of this 
VW7DLO1ASR5O6N does not disable your alarm equipment. If you have questions about what will disable alarm equipment, 
consult your telephone company or a qualified installer. 


SMARTRG INC. PROPRIETARY AND CONFIDENTIAL. ALL RIGHTS RESERVED. COPYRIGHT © 2016 


SMART/RG 


This product meets the applicable Industry Canada technical specifications. / Le présent matériel est conforme aux spe- 
cifications techniques applicables d’Industrie Canada. 


IC-CSO3 statement 


This product meets the applicable Industry Canada technical specifications. / Le présent matériel est conforme aux spe- 
cifications techniques applicables d’Industrie Canada 


The Ringer Equivalence Number (REN) is an indication of the maximum number of devices allowed to be connected toa tele- 
phone interface. The termination of an interface may consist of any combination of devices subject only to the requirement 
that the sum of the RENS of all the devices not exceed five. / L’indice d’équivalence de la sonnerie (IES) sert a indiquer le 
nombre maximal de terminaux qui peuvent être raccordés a une interface téléphonique. La terminaison d’une interface 
peut consister en une combinaison quelconque de dispositifs, a la seule condition que la somme d’indices d’équivalence de 
la sonnerie de tous les dispositifs n’excéde pas cing. 


FCC Statement 


This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the 
FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential install- 
ation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance 
with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that inter- 
ference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television 
reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the inter- 
ference by one or more of the following measures: 


—Reorient or relocate the receiving antenna. 
—Increase the separation between the equipment and receiver. 
—Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. 


—Consult the dealer or an experienced radio/TV technician for help. 
FCC Radiation Exposure Statement 


This device complies with FCC radiation exposure limits set forth for an uncontrolled environment and it also complies with 
Part 15 of the FCC RF Rules. This equipment must be installed and operated in accordance with provided instructions and 
the antenna(s) used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons 
and must not be co-located or operating in conjunction with any other antenna or transmitter. End-users and installers 
must be provide with antenna installation instructions and consider removing the no-collocation statement. 


This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may 
not cause harmful interference, and (2) this device must accept any interference received, including interference that 
may cause undesired operation. 


Caution! Any changes or modifications not expressly approved by the party responsible for compliance could void the user's 
authority to operate the equipment. 
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Canada Statement 


This device complies with Industry Canada licence-exempt RSS standard (s). Operation is subject to the following two con- 
ditions: (1) this device may not cause interference, and (2) this device must accept any interference, including inter- 
ference that may cause undesired operation of the device. 


Le présent appareil est conforme aux CNR d'Industrie Canada applicables aux appareils radio exempts de licence. L'ex- 
ploitation est autorisée aux deux conditions suivantes : (1) l'appareil ne doit pas produire de brouillage, et (2) l'utilisateur 
de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible den compromettre 
le fonctionnement. 


The device meets the exemption from the routine evaluation limits in section 2.5 of RSS 102 and compliance with RSS-102 RF 
exposure, users can obtain Canadian information on RF exposure and compliance. 


Le dispositif rencontre Vexemption des limites courantes d'évaluation dans la section 2.5 de RSS 102 et la conformité a l'ex- 
position de RSS-102 rf, utilisateurs peut obtenir l'information canadienne sur l'exposition et la conformité de rf. 


This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. This equipment 
should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body. 


Cet émetteur ne doit pas être Co-placé ou ne fonctionnant en même temps qu'aucune autre antenne ou émetteur. Cet 
équipement devrait être installé et actionné avec une distance minimum de 20 centimètres entre le radiateur et votre 
corps. 


This radio transmitter (11130A-SR506N) has been approved by Industry Canada to operate with the antenna types listed 
below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna 
types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited 
for use with this device. 


Le présent émetteur radio (identifier le dispositif par son numéro de certification ou son numéro de modèle s'il fait partie 
du matériel de catégorie |) a été approuvé par Industrie Canada pour fonctionner avec les types d'antenne énumérés ci-des- 
sous et ayant un gain admissible maximal et l'impédance requise pour chaque type d'antenne. Les types d'antenne non 
inclus dans cette liste, ou dont le gain est supérieur au gain maximal indiqué, sont strictement interdits pour l'exploitation 
de l'émetteur. 
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REVISION DATE CHANGES 


1.0 : Nov 2016 ‘Initial release of document. 
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